search

anchore / grype

A vulnerability scanner for container images and filesystems
Apache License 2.0
8.17k stars 528 forks source link

List only vulnerabilities from a level and above #1892

Open pantelis-karamolegkos opened 1 month ago

pantelis-karamolegkos commented 1 month ago

What would you like to be added:

Option for showing / listing only vulnerabilities above a threshold severity level

Why is this needed:

To reduce noise output.

Additional context:

tgerla commented 1 month ago

Hey @pantelis-karamolegkos, thank you for the suggestion. I think this issue is similar to: https://github.com/anchore/grype/issues/1612 -- this issue is in our backlog for future implementation. If you're interested in working on it, definitely let us know and we can help you get started. There is also https://github.com/anchore/grype/issues/1378 which is related to severity.

Another solution might be to use a custom template to filter out low priority vulnerabilities (or any other criteria): https://github.com/anchore/grype/tree/main/templates#html -- check out the last section which implements this for HTML output.