A Go CLI that scans your project's dependencies and container images against the OSV vulnerability database to report known vulnerabilities.
11.4K+108 this week844GoApache-2.0Well maintainedUpdated 3 hours ago
#container-security
Best open-source container vulnerability scanners (2026)
These tools check container images, filesystems and software bills of materials (SBOMs) for known security issues. When choosing one, look at what it can scan, such as images, dependencies or live hosts, and which vulnerability data it relies on. Grype is a command-line scanner that covers container images, filesystems and SBOMs. osv-scanner checks project dependencies and container images against the OSV vulnerability database and is listed as a replacement for Snyk and Dependabot. cdxgen focuses on generating CycloneDX and SPDX SBOMs from source code, container images and live hosts.
Sort:Recently added
5 repositories
Clair is an open source static analysis tool that indexes container images and matches them against known vulnerabilities.
11.1K+1 this week1.2KGoApache-2.0Well maintainedUpdated 3 days ago
A command-line vulnerability scanner that checks container images, filesystems and SBOMs for known security issues.
13.2K+53 this week934GoApache-2.0Updated 20 hours ago
An open source platform for running MCP servers in isolated containers, with access policies, a gateway, a registry, and a Kubernetes operator.
2.3K+12 this week326GoApache-2.0Well maintainedUpdated 5 hours ago
CLI, library and server that generates CycloneDX and SPDX software bills of materials (SBOMs) from source code, container images and live hosts.
1.1K+4 this week270JavaScriptApache-2.0Updated 9 hours ago