← retour

catégorie

Vulnerability scanners

Check dependencies and container images against databases of known vulnerabilities.

Côte à côte

Vulnerability scanners
OutilÉtoilesLicenceConditionsAuto-hébergeableLangageDernière releaseDernier push
Trivy38kApache-2.0Open sourceNonGov0.75.02026-10-06
Grype13kApache-2.0Open sourceNonGov0.120.02026-10-05
OSV-Scanner11kApache-2.0Open sourceNonGov2.6.02026-10-05
Clair11kApache-2.0Open sourceNonGov4.9.02026-09-30
Dependency-Check7.7kApache-2.0Open sourceNonJavav13.0.02026-10-05

5 outils

Trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Langage
Go
Licence
Apache-2.0
Étoiles
38k
Dernière release
v0.75.0
Dernier push
2026-10-06
Grype

A vulnerability scanner for container images and filesystems

Langage
Go
Licence
Apache-2.0
Étoiles
13k
Dernière release
v0.120.0
Dernier push
2026-10-05
OSV-Scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

Langage
Go
Licence
Apache-2.0
Étoiles
11k
Dernière release
v2.6.0
Dernier push
2026-10-05
Clair

Vulnerability Static Analysis for Containers

Langage
Go
Licence
Apache-2.0
Étoiles
11k
Dernière release
v4.9.0
Dernier push
2026-09-30
Dependency-Check

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

Langage
Java
Licence
Apache-2.0
Étoiles
7.7k
Dernière release
v13.0.0
Dernier push
2026-10-05

Ce que ces outils remplacent