-
**What would you like to be added**:
Hi, we are working with grype as an [admission controller](https://github.com/boxboat/grypeadmissioncontroller) and we are running it in an AWS EKS environment …
-
[Grype](https://github.com/anchore/grype) is an open source vulnerability scanner from [Anchore](https://anchore.com/opensource/) for container images similar to Trivy. Grype produces a JSON output.
…
-
**What would you like to be added**:
When conducting vulnerability scan with grype, I would like to filter on severity so grype only returns results that meet a certain criticality threshold. e.g. gi…
-
**What happened**:
Grype is reporting a (very old) vulnerability in the `webrick` ruby gem despite running a version with the fix:
```
> docker run --rm -it -v /var/run/docker.sock:/var/run/docke…
-
**What happened**:
I am running grype inside a container and try to run grype db diff.
I allocated 4gb of memory and it fails on "signal killed".
If allocate more memory it doesn't happen (more tha…
-
While I was debugging an issue, I decided to enable the logging package in the grype module so that I could see if my sbom was actually being processed (I received no results initially, but resolved t…
-
**What would you like to be added**:
This is probably a weird question, but when running `grype dir:`, I understand grype is essentially running syft under the hood to produce the source SBOM (or s…
-
Based on the later discussion in https://github.com/anchore/grype/issues/1314, it looks like our Docker image for Grype does not support running as a non-root user. There are some possible ways we cou…
-
I created an SBOM using Syft/Grype and it should have created a valid CycloneDX 1.4 SBOM. The SBOM did not adhere to the CycloneDX 1.4 schema, however the CycloneDX CLI validated it successfully regar…
-
Latest lifecycle release v0.16.0 triggered CVE(s) from Grype. For further details, see: https://github.com/buildpacks/lifecycle/actions/runs/4248832164