
grype
A vulnerability scanner for container images and filesystems

A vulnerability scanner for container images and filesystems

Static analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

A service that analyzes docker images and scans for vulnerabilities

CLI tool that verifies Docker images for CVE-2018-8115 by checking layers for malicious files, helping ensure safe pulls from Docker Hub.

Proof-of-concept exploit for CVE-2023-1999 targeting the WebP codec library on Android 10 (r33). Demonstrates a heap buffer overflow vulnerability in…

Static analysis and structure recovery toolkit for ACE .qvm0-protected PE images