Vulnerability Detection Validation on 16 Open-Source Repositories Rust, Python, PHP, Ruby
113Reported Vulnerabilities Count (Vr)Grype + Trivy Union
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| Grype + Trivy UnionAggregation=Total2025.11 | 113 | 9 | 92 | |
| two-stage SBOM-based vulnerability management pipelineAggregation=Total_cov, Analysis Type=Coverage-based2025.11 | 42 | 9 | 78.6 | |
| Grype + Trivy UnionLanguage=Rust, Repository=guoxbin/dtool2025.11 | 15 | 1 | 93.3 | |
| Grype + Trivy UnionLanguage=Ruby, Repository=abhidsm/time_diff2025.11 | 15 | 0 | 100 | |
| Grype + Trivy UnionLanguage=Python, Repository=beetbox/beets2025.11 | 9 | 4 | 55.6 | |
| Grype + Trivy UnionLanguage=Python, Repository=pyca/cryptography2025.11 | 9 | 0 | 100 | |
| Grype + Trivy UnionLanguage=Ruby, Repository=honeybadger-io/incoming2025.11 | 9 | 0 | 100 | |
| Grype + Trivy UnionLanguage=PHP, Repository=jolicode/JoliCi2025.11 | 8 | 0 | 100 | |
| Grype + Trivy UnionLanguage=Ruby, Repository=camping/camping2025.11 | 8 | 3 | 62.5 | |
| Grype + Trivy UnionLanguage=Ruby, Repository=grosser/fast_gettext2025.11 | 8 | 0 | 100 | |
| Grype + Trivy UnionLanguage=Python, Repository=sdispater/pendulum2025.11 | 7 | 0 | 100 | |
| Grype + Trivy UnionLanguage=Rust, Repository=0xlane/pe-sign2025.11 | 4 | 0 | 100 | |
| Grype + Trivy UnionLanguage=Rust, Repository=sagiegurari/duckscript2025.11 | 4 | 1 | 75 | |
| Grype + Trivy UnionLanguage=Rust, Repository=serverlesstechnology/cqrs2025.11 | 4 | 0 | 100 | |
| Grype + Trivy UnionLanguage=PHP, Repository=getgrav/grav2025.11 | 4 | 0 | 100 | |
| Grype + Trivy UnionLanguage=Python, Repository=mingrammer/diagrams2025.11 | 3 | 0 | 100 | |
| Grype + Trivy UnionLanguage=PHP, Repository=phpbrew/phpbrew2025.11 | 3 | 0 | 100 | |
| Grype + Trivy UnionLanguage=PHP, Repository=FriendsOfPHP/pickle2025.11 | 3 | 0 | 100 |