Grype

Connect Grype to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.

Record your Grype connection as vulnerability scanning evidence. Automated collection is not available for this provider yet.

Connect with an API token

In Grype, create the credential for API token / Personal access token, read-only where it offers that. Grype does not publish these steps; its support team can confirm them.
On Compliance › Connectors, open Grype, click Connect, choose API token and fill in:

Field What to enter
API token / Personal access token Required. Stored encrypted and never shown again.
Base URL (optional) —
Account / Org / Workspace (optional) —
Click Connect with token.

Field	What to enter
API token / Personal access token	Required. Stored encrypted and never shown again.
Base URL (optional)	—
Account / Org / Workspace (optional)	—

No automated compliance test reads Grype yet, so no framework lists it. How connectors provide evidence for frameworks: Frameworks and connectors.

Vulnerability Scanning connectors
Compliance connectors: how connecting works, card statuses and multiple accounts
Connector setup reference: every connector in one table
Frameworks and connectors: how connectors provide evidence for frameworks