devops-219: adding in grype orb

anchore / anchore-engine

A service that analyzes docker images and scans for vulnerabilities

Apache License 2.0

1.57k stars 273 forks source link

devops-219: adding in grype orb #1372

Closed ghost closed 2 years ago

ghost commented 2 years ago

Signed-off-by: Hung Nguyen hung.nguyen@anchore.com

What this PR does / why we need it: Add the grype orb. anchore orb has been deprecated and will be removed in another PR.

Which issue this PR fixes (optional, in fixes #<issue number>)(, fixes #<issue_number, ...) format, will close the issue when PR is merged: fixes #: devops-219

Special notes:

ghost commented 2 years ago

All env vars used for image tags must use dev instead since the orb cannot take in env vars as a param.

Updated and put it in the job as a default param.