Grype
Grype is Anchore's open vulnerability scanner for Syft SBOMs, images, directories, and archives.
Why use it
CI can gate third-party components by severity before shipping game services and tool images.
Where it fits
Use testing, performance, accessibility, and diagnostic tools to remove problems players will notice.
What to check
Advisory databases and package matching lag or misfire; humans must assess exploitability, fixes, and exceptions.