Grype + AppGuard
Fast vulnerability scanner for container images and filesystems. Works natively with Syft SBOMs.
What is Grype?
Grype is a vulnerability scanner for container images and filesystems, developed by Anchore. It works seamlessly with Syft-generated SBOMs to identify known vulnerabilities in your dependencies. Grype is fast, accurate, and supports all major package ecosystems including npm, pip, Go, Ruby, Rust, and more.
Syft SBOM integrationCVE matching with NVD dataMulti-ecosystem supportFast scanning (< 30s for most images)Vulnerability ignore rules
Integrate Grype with AppGuard
1
Install Grype
Install Grype via the official script or Docker.
curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin
2
Scan an image or SBOM
Run Grype against a container image or Syft SBOM.
grype nginx:latest -o sarif > results.sarif
3
Push to AppGuard
Send the results to AppGuard.
curl -X POST "$APPGUARD_PUBLIC_URL/api/ingest" \ -H "X-Api-Token: $API_TOKEN" \ -F "[email protected]"
What AppGuard adds to Grype
Dependency risk scoring
Combine Grype CVE data with EPSS scores for better prioritization.
Version comparison
Compare vulnerability counts between image versions.
Centralized dashboard
View Grype findings alongside SAST, DAST, and secrets scanning results.