Scans SBOMs for vulnerabilities with Grype

Tool for collecting vulnerability data from various sources (used to build the grype database)

Compare data from multiple vulnerability scanners to get a more complete picture of potential exposures.

This repository hosts the admission controller build on top of grype.

Compare vulnerability scanners results (to make them better!)

Wrap Anchore Grype Inside Docker

WORK IN PROGRESS! This is a pet health diary, it is intended that you can log all medication, pet details, observations on health, etc into a database. You can then query that database, get email reminders about upcoming vets appointments and medication administration,and even generate summary reports for your vets to assess their health.

A demonstration of how GoReleaser can help us to make software supply chain more secure by using bunch of tools such as cosign, syft, grype, slsa-provenance

Ansible role for 'grype'. Available on Ansible Galaxy.

A python wrapper for Anchore Grype

A tiny job-scraping project to automating job hunting when employers aren't on indeed, built for my wife

Allowlisting grype vulnerability scans

Generates daily SBOM and vulnerability reports for container images and saves resulting files into GCS bucket and data into BigQuery tables.

Collection of Container Vulnerability Scans of Common Images Using Different Scanners

batCAVE Omnibus

DevSecOps boilerplate that syncs the AWS Infrastrcuture, performs comprehensive SAST and DAST checks of the application, and entails advanced out-of-the-box Cloud Native Monitoring and Security solutions, as well as, implementing Kubernetes Policies as Code.

A simple CircleCI orb used to install Grype and perform vulnerability scans

Applied STRIDE to threat model a microservice env.–defining the security architecture and attack surfaces; hardened the app’s Docker environment using Docker-bench, created an RKE cluster, and hardened a Kubernetes cluster using Grype and Trivy. Also implemented runtime monitoring using Grafana to visualize runtime security alerts via Sysdig Falco.