awesome-alternatives

compare

Grype vs Trivy

The same facts for both, read from GitHub every night, and the relation a person reviewed.

GrypeTrivy
LanguageGoGo
LicenceApache-2.0Apache-2.0
Stars13k38k
Latestv0.120.0v0.75.0
Last push2026-10-052026-10-06
Release cadenceabout 16 days between releasesabout 23 days between releases
Active contributors20 commit authors on the default branch in the last 90 daysnot counted
Flagsnonenone

How they relate

  • Both replace Snyk. Alternatives to Snyk →

    PartialGrypeDependency and container image scanning, from an image, a directory or an SBOM; no code or IaC scanning.

    PartialTrivyScans dependencies, container images, infrastructure as code and secrets from the CLI or CI; no hosted dashboard or fix pull requests.