CVE Binary Tool
6.0#37 in software composition analysis softwareFree planFree planLinuxSelf-hostedWindows
Visit| Fact | CVE Binary Tool | Grype |
|---|---|---|
| Intended users | The project describes CI use for regular vulnerability scans and early warning of known supply-chain issues, and also mentions component detection and SBOM creation. | The project documentation describes individual package scanning as useful for lightweight vulnerability checks and compliance scanning of specific dependencies. |
| Purpose | CVE Binary Tool scans software to identify known vulnerabilities in detected or listed components. | Grype scans container images, filesystems, and SBOMs for known vulnerabilities. |
You want what its maker publishes above — check its page for the details.
Grype suits developers and teams checking packages, images, filesystems, or SBOMs for known vulnerabilities. Its individual-package scanning is also intended for lightweight checks and compliance reviews of specific dependencies.