A vulnerability scanner for container images and filesystems. Easily install the binary to try it out.
Works with Syft, the powerful SBOM (software bill of materials) tool for container images and filesystems.
Publisher’s description
What is Grype?
Grype is an open-source containers & devop program for Windows from Anchore Inc. It ranks 14th by popularity among containers & devops in this catalogue. It is written in Go.
Installation and requirements
Official installers exist for 64-bit as Portable. It runs without installation (portable).
Updates and version history
The current version is 0.121.0, released on October 19, 2026. 59 versions are listed since September 20, 2023, each with links to its own installer files. That is about 19 releases a year. The last update is less than a month old.
Popularity and file types
The Chocolatey package has been downloaded 156,508 times. The source code on GitHub (anchore/grype) has 13,071 stars. Similar programs include Docker Compose, Pulumi and Helm.
Project description on GitHub: “A vulnerability scanner for container images and filesystems”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Portable: runs without installation
- Frequent updates (about 19 a year)
- Large user base
Cons
- No native ARM64 build
In short: Grype is an open-source containers & devop tool for 64-bit PCs. It is actively maintained.
Is Grype safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
F867BBDC14BD8B0D99B3FC47D839AF07480A540072B16896373A8BA32B76F588· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Security practices (OpenSSF Scorecard)
Automated checks of the anchore/grype repository on GitHub by the Open Source Security Foundation, last run on May 18, 2026.
- Dependency update tool10
- No dangerous workflows10
- Actively maintained10
- No binaries in the repository10
- Security policy10
- Static code analysis10
- Licence declared10
- Tests in CI10
- Contributors from several organisations10
- Restricted token permissions9
- Code review8
- Signed releases8
- Pinned dependencies7
- No known vulnerabilities7
- OpenSSF Best Practices badge5
- Branch protection4
- Fuzzing0
The score rates how the project is developed and released, not whether the program is safe to install. scorecard.dev
Recent versions
All 59 versions ›59 versions over 3 years · about 19 a year
| Version | Date | Size | Files |
|---|---|---|---|
| 0.121.0Latest | October 19, 2026 | — | 64-bit ZIP |
| 0.120.1 | October 6, 2026 | — | 64-bit ZIP |
| 0.120.0 | October 2, 2026 | — | 64-bit ZIP |
| 0.119.0 | September 17, 2026 | — | 64-bit ZIP |
| 0.118.0 | August 27, 2026 | — | 64-bit ZIP |
| 0.117.0 | August 10, 2026 | — | 64-bit ZIP |
| 0.116.1 | July 28, 2026 | — | 64-bit ZIP |
| 0.116.0 | July 16, 2026 | — | 64-bit ZIP |
Install from the command line
Silent install ›winget install --id Anchore.Grype -echoco install grype -yscoop install main/grypeRelated guide: How to use winget: install and update apps
Also for other systems
brew install grypeInformation
- Publisher
- Anchore Inc
- Category
- Containers & DevOps
- Licence
- Apache-2.0
- Price
- Free
- Source code
- github.com/anchore/grype
- Written in
- Go
- Requires
- Windows 11 / 10
- Architecture
- 64-bit
- Installer
- Portable
- Version
- 0.121.0
- Released
- October 19, 2026
- Added to the catalogue
- December 27, 2023
- Versions listed
- 59
- Updates / year
- 19.2
- Chocolatey downloads
- 156,508
- GitHub stars
- 13,071
- GitHub forks
- 925
- Website
- github.com
- winget ID
- Anchore.Grype
- Chocolatey package
- grype
- Scoop package
- main/grype
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to Grype
See all ›-
Open source559.4K ↓ -
Open source395.6K ↓ -
Open source1.6M ↓ -
Kubernetes - Minikube - A Local Kubernetes Development Environment1.39.0minikube quickly sets up a local Kubernetes cluster on macOS, Linux, and Windows. We proudly focus on helping application developers and new Kubernetes users.Open source747.8K ↓ -
Open source82.7K ↓ -
Open source299.3K ↓ -
Serverless Framework3.39.0Build applications on AWS Lambda and other next-gen cloud services, that auto-scale and only charge you when they run.Open source84.9K ↓ -
Open source2.3M ↓
Frequently asked questions
Is Grype free?
Yes. Grype is open-source software under the Apache-2.0 licence.
Is Grype safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install Grype with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Does Grype run on ARM (Windows on Arm)?
There is no ARM64 build; Windows 11 on Arm can run the 64-bit version through emulation.
Where can I download an older version of Grype?
The versions page lists all 59 versions with links to their official installer files, back to September 20, 2023.
Can I use Grype without administrator rights?
Yes, it is portable: unpack and run it.
What are alternatives to Grype?
Docker Compose, Pulumi, Helm, Kubernetes - Minikube - A Local Kubernetes Development Environment and Trivy. The alternatives page compares them.
