Skip to main content
Grype scans every container image running in your cluster for known vulnerabilities using the Grype vulnerability database.

​
Features

  • Scheduled scans — every 4 hours by default
  • Scan on deploy — triggers when new images appear
  • Severity filtering — configurable threshold
  • SBOM integration — scans SBOMs when Syft is enabled (faster)

​
Configuration

​
Dashboard

Results appear in Security Scanning → Vulnerabilities with CVE ID, severity, affected package, fixed version, and impacted pods.