#1
A vulnerability scanner for container images and filesystems
13K starsJul 17, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add anchore/grypeAlternatives
Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.
Current skill
Go security checker
A vulnerability scanner for container images and filesystems
$ npx skills add anchore/grypeCLI tool and library for generating a Software Bill of Materials from container images and filesystems
$ npx skills add anchore/syftHow to choose
Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep Gosec if it already passes your workflow test and repository review.
Next step
Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.
A static analyzer for Java, C, C++, and Objective-C
$ npx skills add facebook/inferPHP Static Analysis Tool - discover bugs in your code without running it!
$ npx skills add phpstan/phpstanCheckstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
$ npx skills add checkstyle/checkstyleVulnerability Static Analysis for Containers
$ npx skills add quay/clairA static analysis security vulnerability scanner for Ruby on Rails applications
$ npx skills add presidentbeef/brakemanAn extremely fast Python linter and code formatter, written in Rust.
$ npx skills add astral-sh/ruffShellCheck, a static analysis tool for shell scripts
$ npx skills add koalaman/shellcheckA tool to enforce Swift style and conventions.
$ npx skills add realm/SwiftLintLightweight static analysis for many languages. Find bug variants with patterns that look like source code.
$ npx skills add semgrep/semgrepA tool to automatically fix PHP Coding Standards issues
$ npx skills add PHP-CS-Fixer/PHP-CS-FixerContinuous Inspection
$ npx skills add SonarSource/sonarqubeDockerfile linter, validate inline bash, written in Haskell
$ npx skills add hadolint/hadolintCatch common Java mistakes as compile-time errors
$ npx skills add google/error-prone🐶 Automated code review tool integrated with any code analysis tools regardless of programming language
$ npx skills add reviewdog/reviewdog