[Installer] Add `anchore/grype`

[joshsleeper]

Add anchore/grype

We want to add anchore/grype because...

• it works consistently across Windows, Mac, and Linux.
• grype is a CLI tool from Anchore for vulnerability scanning a container or filesystem

This could be as simple as copying _example, updating the github releases info, and doing a find and replace on a few file system path names.

How to create a webi installer

Skills required

• Basic Command Line knowledge (mkdir, mv, ls, tar, unzip, variables)

Steps

1. Clone and setup the webi packages repo

   git clone git@github.com:webinstall/packages.git
   pushd packages/
   npm install

2. Copy the example template and update with info from Official Releases: https://github.com/anchore/grype/releases

   rsync -av _example/ grype/

   • [ ] update grype/release.js to use the official repo
   • [ ] Learn how grype unpacks (i.e. as a single file? as a .tar.gz? as a .tar.gz with a folder named grype?)
   • [ ] find and replace to change the name
     • [ ] update grype/install.sh (see bat and jq as examples)
     • [ ] update grype/install.ps1 (see bat and jq as examples)
3. Needs an updated tagline and cheat sheet
   • [ ] update grype/README.md
     • [ ] official URL
     • [ ] tagline
     • [ ] Switch versions
     • [ ] description / summary
     • [ ] General pointers on usage (and perhaps "gotchas")

It's also okay to have multiple people work on part of this (i.e. the Cheat Sheet can be done independently from the install.sh)

[stic-lab]

Hello @joshsleeper , I would like to try

[joshsleeper]

by all means, I don't have write access to this repo as I'm just a webi user myself, so I can't assign it to you or anything ¯\_(ツ)_/¯

[coolaj86]

@stic-lab do it. @joshsleeper can you help with the cheat sheet?

[stic-lab]

@coolaj86 thank you. I am on it now

[brthngnsh]

If this is still open, may I work on this? @joshsleeper @coolaj86

[joshsleeper]

as I said before, I don't have any sway or decision making powers here, and haven't started on anything myself otherwise I would've let folks know~

@stic-lab said he was planning to work on something back in Jan it seems, but we clearly haven't heard anything on this issue since.

[stic-lab]

Please, let @brthngnsh do it. I was not able to manage my time to do it. Sorry it guys.

[GreyOwl123]

Hello coolaj86, I came upon this and decided to try it first before asking you to assign this, I'm done now and would be creating a PR, if there's any mistake or correction to make, you can mention me, I'll get back to it...

[coolaj86]

This was completed via https://github.com/webinstall/webi-installers/pull/652