Version updated for https://github.com/TomTonic/grype_me to version v1.3.18-release. This action is used across all versions by 0 repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action automates the scanning of project dependencies and vulnerabilities using the latest Grype database. It provides a simple interface to scan repositories, container images, directories, or SBOMs, generating detailed reports and badges that can be used in READMEs. The action is designed to be lightweight and fast, leveraging pre-downloaded databases to speed up vulnerability scans compared to installing Grype during each run.

Version updated for https://github.com/TomTonic/grype_me to version v1.3.17-release. This action is used across all versions by 0 repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. What’s Changed v1.3.17-release Source Code Updates Go toolchain updated 1.26.4 → 1.26.5. This release includes two upstream Go security fixes: CVE-2026-39822 — os.Root symlink escape: on Unix, opening a path ending in / inside an os.Root could follow a symlink to a location outside the root if the final path component was itself a symlink (e.g. root.Open("symlink/") would open symlink even though it points outside the root). CVE-2026-42505 — crypto/tls Encrypted Client Hello (ECH) privacy leak. grype_me does not use os.Root or ECH directly, but the fix ships automatically via the toolchain bump and is recommended for all users building or running this action.