/docker-grype

Docker image with anchore/grype

Primary LanguageDockerfileGNU General Public License v3.0GPL-3.0

tgagor/grype

build

This Docker image provides Anchore's Grype binary so you can use it easily for testing security of Docker images.

You can fetch docker image from:

Beware that image sets ENTRYPOINT straight to grype.

Usage examples

Single execution

If you just want to scan single image:

docker run -ti --rm \
    --name grype \
    -v /var/run/docker.sock:/var/run/docker.sock \
    tgagor/grype alpine

Store DB

For scanning of multiple images you might want to save DB in temporary location to avoid re-downloading for each scan:

docker run -ti --rm \
    --name grype \
    -v /var/run/docker.sock:/var/run/docker.sock \
    -v /tmp/db:/var/lib/grype/db \
    tgagor/grype alpine