Container Vulnerability Scanner

About

This skill integrates the open-source Grype vulnerability scanner into your development environment, enabling automated security audits of container images and software dependencies. It provides a comprehensive framework for identifying known vulnerabilities (CVEs) across multiple ecosystems including NPM, Maven, PyPI, and Docker/OCI images. By implementing manual scans, pre-commit hooks, and CI/CD integration, the skill helps developers maintain security compliance and catch critical risks early in the software lifecycle before code reaches production.

Key Features

• High-speed vulnerability scanning for OCI and Docker images
• Detailed remediation guidance with CVE identification and fix versions
• Automated pre-commit security gates to prevent vulnerable pushes
• Configurable severity-based failure thresholds (Critical, High, etc.)
• 31 GitHub stars
• Deep dependency analysis for NPM, Maven, PyPI, and more

Use Cases

• Performing bulk dependency audits for repository maintenance
• Integrating vulnerability scanning into GitHub Actions or CI/CD pipelines
• Setting up automated security gates for containerized applications