// Guard secrets & permissions
grypev0.120.1
A vulnerability scanner for container images and filesystems
Open source Maintained For agents
IN ONE PARAGRAPH
grype is A vulnerability scanner for container images and filesystems.
Good for: Developers who want their agent (Claude Code, Codex, Cursor…) to guard secrets & permissions.
01How to start
- 1Read the official README for requirements and permissions.
- 2Install it from the official package registry:
brew install grype - 3Tell your agent the command exists (e.g. in AGENTS.md / CLAUDE.md) so it knows when to call it.
02Alternatives & comparison
Compare side by side → syft CLI tool and library for generating a Software Bill of Materials from container images and filesystems ★ 9.6k trivy Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more ★ 38k infisical Infisical is the open-source platform for secrets, certificates, and privileged access management. ★ 30k openbao OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. ★ 8.4k vault A tool for secrets management, encryption as a service, and privileged access management ★ 36k
03Related
- ›BlueDot Impact AI Alignment 课程 · BlueDot ImpactEnglish
- ›BlueDot Impact AI Governance 课程 · BlueDot ImpactEnglish
- ›AI Safety, Ethics and Society 教材 · Center for AI Safety / Dan HendrycksEnglish
- ›OWASP Top 10 for LLM Applications · OWASP GenAI Security ProjectMultilingual (incl. EN/ZH)
- ›MITRE ATLAS · MITREEnglish
- All tutorials →