govulncheck
5.8#44 in software composition analysis softwareFree planFree planLinux
Visitgovulncheck vs Grype
Grype
7.4#3 in software composition analysis softwareFree planFree planLinuxmacOSSelf-hostedWindows
VisitWhat both publish
| Fact | govulncheck | Grype |
|---|---|---|
| Output formats | Govulncheck supports streaming JSON, SARIF, and OpenVEX output. | Configuration supports table, template, JSON and CycloneDX vulnerability-report outputs. |
| Purpose | Govulncheck reports known vulnerabilities that affect Go code. | Grype scans container images, filesystems, and SBOMs for known vulnerabilities. |
govulncheck plans
- GovulncheckFree
Grype plans
- GrypeFree
- Grype open-source scannerFree
Pick govulncheck if…
You want what its maker publishes above — check its page for the details.
Pick Grype if…
Grype suits developers and teams checking packages, images, filesystems, or SBOMs for known vulnerabilities. Its individual-package scanning is also intended for lightweight checks and compliance reviews of specific dependencies.