anchore / grype

A vulnerability scanner for container images and filesystems

datosh / nixos-vex

OpenVEX feed and NixOS module to manage NixOS CVEs, evaluated against your system's configuration.