Dockle
6.0#14 in container security softwareFree planFree planLinuxmacOSWindows
VisitDockle vs Grype
Grype
7.4#3 in software composition analysis softwareFree planFree planLinuxmacOSSelf-hostedWindows
VisitWhat both publish
| Fact | Dockle | Grype |
|---|---|---|
| Installation | Installation options include Homebrew, RHEL/CentOS, Debian/Ubuntu, Arch Linux, Windows binaries, version managers, source builds, and Docker. | Official binaries and source archives are provided for Linux, macOS and Windows, with installer-script, Docker and package-manager options. |
| License | The repository lists the project under the Apache-2.0 license. | The project is released under the Apache-2.0 License. |
| Output formats | It can display or save results in JSON and SARIF formats. | Configuration supports table, template, JSON and CycloneDX vulnerability-report outputs. |
| Purpose | Dockle is a container image linter for security that helps build best-practice Docker images. | Grype scans container images, filesystems, and SBOMs for known vulnerabilities. |
Dockle plans
- DockleFree
Grype plans
- GrypeFree
- Grype open-source scannerFree
Pick Dockle if…
It suits teams and developers who need self-hosted container image checks in local workflows or continuous integration across major desktop platforms.
Pick Grype if…
Grype suits developers and teams checking packages, images, filesystems, or SBOMs for known vulnerabilities. Its individual-package scanning is also intended for lightweight checks and compliance reviews of specific dependencies.