Author | Lightnews

Grype

Grype

@grypeproject.bsky.social

540 followers 980 following 260 posts

Grype is an open source vulnerability scanner for Software Bills of Material (SBOMs), containers, and filesystems. Created and maintained by Anchore https://github.com/anchore/grype

Posts Media Videos Starter Packs

Pinned

Grype @grypeproject.bsky.social · Nov 21

A one minute video introduction to @syftproject.bsky.social and @grypeproject.bsky.social
www.youtube.com/watch?v=ZUpU...

One Minute Security with Syft and Grype

YouTube video by Anchore

www.youtube.com

Grype @grypeproject.bsky.social · 1h

We're LIVE! Join the Anchore Open Source team now to discuss Syft, Grype, and the latest in #OpenSourceSecurity. Ask your questions! https://www.youtube.com/watch?v=AU19ViNKy08

Grype @grypeproject.bsky.social · 1h

We're live in 5 minutes! Join the Anchore Open Source team now for an interactive discussion on our tools and roadmap.

https://www.youtube.com/watch?v=AU19ViNKy08

Grype @grypeproject.bsky.social · 2h

Going live in 1 hour! Tune into the Anchore Open Source stream for all things Syft, Grype, & open source security. #OpenSource

https://www.youtube.com/watch?v=AU19ViNKy08

Grype @grypeproject.bsky.social · 17h

Tomorrow! Get ready for our Anchore Open Source live stream at 12 PM PT. Dive into Syft, Grype, and more. Don't miss out! #DevSecOps

https://www.youtube.com/watch?v=AU19ViNKy08

Grype @grypeproject.bsky.social · 1d

We're thrilled to be sponsoring #CloudNativeNow25! Join us and @CloudNativeNow on October 30 for a deep dive into the future of cloud native. Whether you're ... https://www.techstrongevents.com/cloud-native-now-2025/home?ref=sponsor-invites&utm_source=hs&utm_medium=email&utm_campaign=sponsor-invites

Cloud Native Now 2025

Cloud Native, One for the Road – A Cloud Native Now Virtual Event Hey Bartender, pour us another round of cloud native! It used to be that cloud native was just for the public cloud crowd—a smooth pour straight from the hyperscalers. But times have changed, and now cloud native is everywhere. Whether you’re sipping from a public cloud, private cloud, hypervisor, or going full throttle on bare metal, there’s no wrong way to enjoy it. And it’s not just about where it’s hosted—cloud native is all over the SDLC. From platform engineering to AppDev, testing to GitOps, SRE to deployment, and straight into production, this one’s on the house for every team in the business. So, grab your hat, put on your shades, and join us for Cloud Native, One for the Road. Because whether you’re running at the edge, in a data center, or deep in a hyperscaler hub, cloud native is the drink of choice—smooth, fast, and always on tap. Come thirsty. Stay cloud native.

Grype @grypeproject.bsky.social · 2d

Join the Anchore Open Source team this Thursday at 12 PM PT for our live stream! We'll cover issues, PRs, & roadmap. #SBOM #Vulnerability
https://www.youtube.com/watch?v=AU19ViNKy08

Grype @grypeproject.bsky.social · 2d

The legal landscape for Open Source is changing fast. New regulations mean ne... https://webinars.techstronglearning.com/the-regulation-and-liability-of-open-source-software?utm_campaign=23594253-2025.10.28-Anchore-SB&utm_source=anchore&utm_medium=techstrong
#OpenSource #OSSLiability #Cybersecurity

Grype @grypeproject.bsky.social · 7d

We're LIVE! The Anchore Open Source team is here to chat Syft, Grype, and all things #OpenSource. Jump in and say hi!
https://www.youtube.com/watch?v=b5MdzKb9Ypc

Grype @grypeproject.bsky.social · 7d

Live in 5 minutes! Join the Anchore Open Source stream NOW for all the Syft & Grype goodness. Your questions, our answers!
https://www.youtube.com/watch?v=b5MdzKb9Ypc

Grype @grypeproject.bsky.social · 7d

One hour until we go LIVE! Get your questions ready for the Anchore Open Source team – we're talking Syft, Grype & more! #DevTalk
https://www.youtube.com/watch?v=b5MdzKb9Ypc

Grype @grypeproject.bsky.social · 7d

Psst... tomorrow at 12 PM PT, the Anchore OS crew hits the airwaves! Get your Syft & Grype insights straight from the source. #Grype #Syft
https://www.youtube.com/watch?v=b5MdzKb9Ypc

Grype @grypeproject.bsky.social · 7d

Well, this is awkward...
https://www.reddit.com/r/devops/comments/1mbowvo/do_oss_compliance_tools_have_to_be_this_heavy/

A question posed in r/devops - "Do OSS compliance tools have to be this heavy? Would you use one if it was just a CLI?"...

Grype @grypeproject.bsky.social · 9d

Got Syft/Grype questions? Our Open Source team is live Thursday at 12 PM PT to tackle bugs, PRs, & future plans. Don't be a stranger! #SBOM
https://www.youtube.com/watch?v=b5MdzKb9Ypc

Grype @grypeproject.bsky.social · 12d

Hey, did you know grype has an "explain" option, that... "explains" vulnerabilities.
There's even a blog about it: https://anchore.com/blog/introducing-grype-explain/
#security #vulnerability

Grype @grypeproject.bsky.social · 12d

Missed the Syft/Grype insights? No worries! Catch the recording of our latest Open Source stream here: #SoftwareSupplyChain

Live SBOM & Security Fixes: Anchore Devs Improve Syft & Grype (September 11th)

Join our weekly *Open Source Security* live stream! Watch Anchore's Developer Relations and Engineering teams collaborate in real-time on crucial *Software Supply Chain Security* tools. This session focuses on improving *Syft* (for *SBOM* generation) and *Grype* (for *vulnerability scanning*), addressing community-raised issues and pull requests. Every Thursday, "Open Source Gardening" offers a transparent look into maintaining popular *open source security* projects. We'll dive into items marked 'needs discussion' and, time permitting, tackle other interesting contributions. Learn development best practices, understand the challenges of *SBOM* accuracy, and see how *vulnerability scanning* tools evolve. Whether you're a contributor, user, or just curious about *open source security*, tune in to learn and engage with the minds behind Anchore's OSS tools. *Agenda:* - Discuss and resolve issues/PRs tagged 'needs discussion'. - Tackle other high-priority or interesting community contributions for Syft, Grype, and related projects. *Resources & Learn More:* - Learn about SBOMs: [Link to Anchore's SBOM pillar page/guide if available] - Dive into Software Supply Chain Security: [Link to relevant Anchore pillar page/blog if available] - Syft on GitHub: https://github.com/anchore/syft - Grype on GitHub: https://github.com/anchore/grype - Join the Community Discussion: https://anchore.com/discourse - All Anchore Open Source Projects: https://github.com/anchore - Sign-up for the OSS Newsletter: https://get.anchore.com/anchore-community/ #OpenSourceSecurity #SBOM #SoftwareSupplyChainSecurity

www.youtube.com

Grype @grypeproject.bsky.social · 14d

We're LIVE! The Anchore Open Source team is here to chat Syft, Grype, and all things #OpenSource. Jump in and say hi!

Live SBOM & Security Fixes: Anchore Devs Improve Syft & Grype (September 11th)

Join our weekly *Open Source Security* live stream! Watch Anchore's Developer Relations and Engineering teams collaborate in real-time on crucial *Software Supply Chain Security* tools. This session focuses on improving *Syft* (for *SBOM* generation) and *Grype* (for *vulnerability scanning*), addressing community-raised issues and pull requests. Every Thursday, "Open Source Gardening" offers a transparent look into maintaining popular *open source security* projects. We'll dive into items marked 'needs discussion' and, time permitting, tackle other interesting contributions. Learn development best practices, understand the challenges of *SBOM* accuracy, and see how *vulnerability scanning* tools evolve. Whether you're a contributor, user, or just curious about *open source security*, tune in to learn and engage with the minds behind Anchore's OSS tools. *Agenda:* - Discuss and resolve issues/PRs tagged 'needs discussion'. - Tackle other high-priority or interesting community contributions for Syft, Grype, and related projects. *Resources & Learn More:* - Learn about SBOMs: [Link to Anchore's SBOM pillar page/guide if available] - Dive into Software Supply Chain Security: [Link to relevant Anchore pillar page/blog if available] - Syft on GitHub: https://github.com/anchore/syft - Grype on GitHub: https://github.com/anchore/grype - Join the Community Discussion: https://anchore.com/discourse - All Anchore Open Source Projects: https://github.com/anchore - Sign-up for the OSS Newsletter: https://get.anchore.com/anchore-community/ #OpenSourceSecurity #SBOM #SoftwareSupplyChainSecurity

www.youtube.com

Grype @grypeproject.bsky.social · 14d

Live in 5 minutes! Join the Anchore Open Source stream NOW for all the Syft & Grype goodness. Your questions, our answers!

Live SBOM & Security Fixes: Anchore Devs Improve Syft & Grype (September 11th)

Join our weekly *Open Source Security* live stream! Watch Anchore's Developer Relations and Engineering teams collaborate in real-time on crucial *Software Supply Chain Security* tools. This session focuses on improving *Syft* (for *SBOM* generation) and *Grype* (for *vulnerability scanning*), addressing community-raised issues and pull requests. Every Thursday, "Open Source Gardening" offers a transparent look into maintaining popular *open source security* projects. We'll dive into items marked 'needs discussion' and, time permitting, tackle other interesting contributions. Learn development best practices, understand the challenges of *SBOM* accuracy, and see how *vulnerability scanning* tools evolve. Whether you're a contributor, user, or just curious about *open source security*, tune in to learn and engage with the minds behind Anchore's OSS tools. *Agenda:* - Discuss and resolve issues/PRs tagged 'needs discussion'. - Tackle other high-priority or interesting community contributions for Syft, Grype, and related projects. *Resources & Learn More:* - Learn about SBOMs: [Link to Anchore's SBOM pillar page/guide if available] - Dive into Software Supply Chain Security: [Link to relevant Anchore pillar page/blog if available] - Syft on GitHub: https://github.com/anchore/syft - Grype on GitHub: https://github.com/anchore/grype - Join the Community Discussion: https://anchore.com/discourse - All Anchore Open Source Projects: https://github.com/anchore - Sign-up for the OSS Newsletter: https://get.anchore.com/anchore-community/ #OpenSourceSecurity #SBOM #SoftwareSupplyChainSecurity

www.youtube.com

Grype @grypeproject.bsky.social · 14d

One hour until we go LIVE! Get your questions ready for the Anchore Open Source team – we're talking Syft, Grype & more! #DevTalk

Live SBOM & Security Fixes: Anchore Devs Improve Syft & Grype (September 11th)

Join our weekly *Open Source Security* live stream! Watch Anchore's Developer Relations and Engineering teams collaborate in real-time on crucial *Software Supply Chain Security* tools. This session focuses on improving *Syft* (for *SBOM* generation) and *Grype* (for *vulnerability scanning*), addressing community-raised issues and pull requests. Every Thursday, "Open Source Gardening" offers a transparent look into maintaining popular *open source security* projects. We'll dive into items marked 'needs discussion' and, time permitting, tackle other interesting contributions. Learn development best practices, understand the challenges of *SBOM* accuracy, and see how *vulnerability scanning* tools evolve. Whether you're a contributor, user, or just curious about *open source security*, tune in to learn and engage with the minds behind Anchore's OSS tools. *Agenda:* - Discuss and resolve issues/PRs tagged 'needs discussion'. - Tackle other high-priority or interesting community contributions for Syft, Grype, and related projects. *Resources & Learn More:* - Learn about SBOMs: [Link to Anchore's SBOM pillar page/guide if available] - Dive into Software Supply Chain Security: [Link to relevant Anchore pillar page/blog if available] - Syft on GitHub: https://github.com/anchore/syft - Grype on GitHub: https://github.com/anchore/grype - Join the Community Discussion: https://anchore.com/discourse - All Anchore Open Source Projects: https://github.com/anchore - Sign-up for the OSS Newsletter: https://get.anchore.com/anchore-community/ #OpenSourceSecurity #SBOM #SoftwareSupplyChainSecurity

www.youtube.com

Grype @grypeproject.bsky.social · 15d

Psst... tomorrow at 12 PM PT, the Anchore OS crew hits the airwaves! Get your Syft & Grype insights straight from the source. #Grype #Syft

Live SBOM & Security Fixes: Anchore Devs Improve Syft & Grype (September 11th)

Join our weekly *Open Source Security* live stream! Watch Anchore's Developer Relations and Engineering teams collaborate in real-time on crucial *Software Supply Chain Security* tools. This session focuses on improving *Syft* (for *SBOM* generation) and *Grype* (for *vulnerability scanning*), addressing community-raised issues and pull requests. Every Thursday, "Open Source Gardening" offers a transparent look into maintaining popular *open source security* projects. We'll dive into items marked 'needs discussion' and, time permitting, tackle other interesting contributions. Learn development best practices, understand the challenges of *SBOM* accuracy, and see how *vulnerability scanning* tools evolve. Whether you're a contributor, user, or just curious about *open source security*, tune in to learn and engage with the minds behind Anchore's OSS tools. *Agenda:* - Discuss and resolve issues/PRs tagged 'needs discussion'. - Tackle other high-priority or interesting community contributions for Syft, Grype, and related projects. *Resources & Learn More:* - Learn about SBOMs: [Link to Anchore's SBOM pillar page/guide if available] - Dive into Software Supply Chain Security: [Link to relevant Anchore pillar page/blog if available] - Syft on GitHub: https://github.com/anchore/syft - Grype on GitHub: https://github.com/anchore/grype - Join the Community Discussion: https://anchore.com/discourse - All Anchore Open Source Projects: https://github.com/anchore - Sign-up for the OSS Newsletter: https://get.anchore.com/anchore-community/ #OpenSourceSecurity #SBOM #SoftwareSupplyChainSecurity

www.youtube.com

Grype @grypeproject.bsky.social · 15d

Got Syft/Grype questions? Our Open Source team is live Thursday at 12 PM PT to tackle bugs, PRs, & future plans. Don't be a stranger! #SBOM

Live SBOM & Security Fixes: Anchore Devs Improve Syft & Grype (September 11th)

Join our weekly *Open Source Security* live stream! Watch Anchore's Developer Relations and Engineering teams collaborate in real-time on crucial *Software Supply Chain Security* tools. This session focuses on improving *Syft* (for *SBOM* generation) and *Grype* (for *vulnerability scanning*), addressing community-raised issues and pull requests. Every Thursday, "Open Source Gardening" offers a transparent look into maintaining popular *open source security* projects. We'll dive into items marked 'needs discussion' and, time permitting, tackle other interesting contributions. Learn development best practices, understand the challenges of *SBOM* accuracy, and see how *vulnerability scanning* tools evolve. Whether you're a contributor, user, or just curious about *open source security*, tune in to learn and engage with the minds behind Anchore's OSS tools. *Agenda:* - Discuss and resolve issues/PRs tagged 'needs discussion'. - Tackle other high-priority or interesting community contributions for Syft, Grype, and related projects. *Resources & Learn More:* - Learn about SBOMs: [Link to Anchore's SBOM pillar page/guide if available] - Dive into Software Supply Chain Security: [Link to relevant Anchore pillar page/blog if available] - Syft on GitHub: https://github.com/anchore/syft - Grype on GitHub: https://github.com/anchore/grype - Join the Community Discussion: https://anchore.com/discourse - All Anchore Open Source Projects: https://github.com/anchore - Sign-up for the OSS Newsletter: https://get.anchore.com/anchore-community/ #OpenSourceSecurity #SBOM #SoftwareSupplyChainSecurity

www.youtube.com

Grype @grypeproject.bsky.social · 19d

Want to influence the direction of Grype? 🚀 Tell us how you use it and what improvements you'd like to see! Your feedback matters! Survey here: https://forms.gle/hvgpNeZadLfFhCf69
#Grype #Security #OpenSource

Grype @grypeproject.bsky.social · 22d

Well, this is awkward...
https://www.reddit.com/r/devops/comments/1mbowvo/do_oss_compliance_tools_have_to_be_this_heavy/

A question posed in r/devops - "Do OSS compliance tools have to be this heavy? Would you use one if it was just a CLI?"...

Grype @grypeproject.bsky.social · Sep 20

Hey, did you know grype has an "explain" option, that... "explains" vulnerabilities.
There's even a blog about it: https://anchore.com/blog/introducing-grype-explain/
#security #vulnerability

Grype @grypeproject.bsky.social · Sep 20

Want to influence the direction of Grype? 🚀 Tell us how you use it and what improvements you'd like to see! Your feedback matters! Survey here: https://forms.gle/hvgpNeZadLfFhCf69
#Grype #Security #OpenSource

Grype @grypeproject.bsky.social · Sep 20

Think of your SBOM as an everything-bagel. 🥯 We find the moldy bits (vulns). Our friend Grant finds the cilantro (unwanted licenses 🌿). One #SBOM, no nasty surprises! See how it works:
https://www.youtube.com/watch?v=RVyryb8f5GQ