{"id":19368481,"url":"https://github.com/anchore/grype-vscode","last_synced_at":"2025-08-01T00:04:38.888Z","repository":{"id":44964346,"uuid":"285160436","full_name":"anchore/grype-vscode","owner":"anchore","description":"Grype vulnerability check plugin for Visual Studio Code","archived":false,"fork":false,"pushed_at":"2024-12-11T14:12:27.000Z","size":498,"stargazers_count":22,"open_issues_count":11,"forks_count":5,"subscribers_count":15,"default_branch":"main","last_synced_at":"2025-04-02T16:50:38.877Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-08-05T02:47:14.000Z","updated_at":"2024-12-11T14:12:31.000Z","dependencies_parsed_at":"2024-12-11T15:19:59.070Z","dependency_job_id":"ef6f35ec-7aaa-42e8-8f43-8166dc63ec0e","html_url":"https://github.com/anchore/grype-vscode","commit_stats":null,"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fgrype-vscode","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fgrype-vscode/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fgrype-vscode/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fgrype-vscode/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/grype-vscode/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":250460242,"owners_count":21434229,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-10T08:06:42.218Z","updated_at":"2025-04-23T15:30:43.705Z","avatar_url":"https://github.com/anchore.png","language":"TypeScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Grype for Visual Studio Code\n\n[![GitHub release](https://img.shields.io/github/release/anchore/grype-vscode.svg)](https://github.com/anchore/grype-vscode/releases/latest)\n[![License: Apache-2.0](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://github.com/anchore/grype-vscode/blob/main/LICENSE)\n[![Slack Invite](https://img.shields.io/badge/Slack-Join-blue?logo=slack)](https://anchore.com/slack)\n\nThe Grype extension for Visual Studio Code makes it easy to know when your project is using dependencies that have known security vulnerabilities.\n\n![Grype Extension Demo](https://user-images.githubusercontent.com/5199289/92470955-29b75500-f1a5-11ea-82f6-941c9a6934f8.gif)\n\n**IMPORTANT: Windows support is not yet available.** This extension supports only macOS and Linux.\n\nThis extension brings Grype into your Visual Studio Code experience. For the raw CLI capabilities, be sure to check out [Grype](https://github.com/anchore/grype).\n\n## Installation\n\nTo install the extension, open the Extensions view, search for \"grype\" to filter results, and select the Grype extension authored by Anchore, Inc.\n\nThere is no need to install the Grype binary before installing this extension. This extension maintains its own instance of the Grype binary, so as not to interfere with any other installation of Grype.\n\n## Overview of features\n\n### Automatic background scanning\n\nThe extension watches for changes to files in order to proactively scan your project for vulnerabilities.\n\nThe current count of vulnerabilities is displayed in the status bar at the bottom of the window.\n\n![Grype status bar](https://user-images.githubusercontent.com/5199289/92489715-1664b380-f1be-11ea-8e30-d94b819cf5a7.gif)\n\nAutomatic scanning is enabled by default. You can disable it for your workspace using either of these methods:\n\n1. Click on Grype's status bar item, and select the action \"Disable Automatic Scanning\".\n1. Launch the Command Palette, and run the command \"Grype: Disable Automatic Scanning\".\n\nYou can enable automatic scanning again using either the status bar item or the Command Palette.\n\n### Vulnerability report\n\nGet a list of your project's vulnerabilities in a sortable table, which sorts by _severity_ (highest to lowest) by default.\n\nLearn more about a vulnerability by clicking the link in the Vulnerability column.\n\nThe report is updated automatically as scans complete.\n\n![Grype Vulnerability Report](https://user-images.githubusercontent.com/5199289/92484713-0649d580-f1b8-11ea-915f-ab495dc3f71d.png)\n\n### See vulnerabilities from a manifest file\n\nThe extension adds a CodeLens provider that allows you to see how many vulnerabilities the current file is contributing to your project's total count of vulnerabilities.\n\nClicking the vulnerability count opens the full Vulnerability Report.\n\n![Grype CodeLens](https://user-images.githubusercontent.com/5199289/92489717-1795e080-f1be-11ea-8569-29cfe7f2828a.png)\n\n### Manual scanning\n\nYou can always initiate a vulnerability scan manually. You can do this using either of these methods:\n\n1. Click on Grype's status bar item, and select the action \"Scan Now\".\n1. Launch the Command Palette, and run the command \"Grype: Scan Now\".\n\n## Contributing to this project\n\nTo set up a local development environment:\n\n1. Make sure you have VS Code installed. (If not, you can download it from here.)\n1. Clone this repository.\n1. Change the working directory to the repository root.\n1. Run `npm install`.\n1. Open the repository in Visual Studio Code.\n\n```\n$ git clone git@github.com:anchore/grype-vscode.git\n[...]\n$ cd grype-vscode\n$ npm install\n[...]\n$ code .\n```\n\nTo run the extension from your local code, start debugging. (Press F5, or go to the Run menu and select \"Start Debugging\".)\n\nAfter a few seconds, a second VS Code window should open, with the words \"Extension Development Host\" in the window title. In this second window, the VS Code extension is installed and running! You can use this second window to open any project like you would normally.\n\nFor more information on developing Visual Studio Code Extensions, check out https://code.visualstudio.com/api.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fanchore%2Fgrype-vscode","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fanchore%2Fgrype-vscode","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fanchore%2Fgrype-vscode/lists"}