Grype

grype

A vulnerability scanner for container images and filesystems.

Runs as grype|macOS, Linux, Windows|github.com

Autocomplete

Generated from the command form · 9 options

Published once and never changed; check the digest before caching

sha256

6d74927241b70ef0d17f20918e3de0e339963526199b809961687cddaae03588

Size

3779 bytes

OptionsOn grype itself

-o

Output format <output>

--file

Write report to file <file>

--fail-on

Exit non-zero when a vulnerability at or above this severity is found. <fail_on>

--from

Force how the target is read, for example docker, registry, podman or containers-storage. <from>

--platform

For example linux/arm64. <platform>

--distro

Distro to match <distro>

--exclude

Exclude paths (glob) <exclude>

--by-cve

Orient results by CVE

--name

Target name <name>

ArgumentsPositional, in order

<target>

For example alpine:latest, ./my-project or sbom:./sbom.json. Leave empty to read an SBOM from standard input. · optional