otty / apps
All apps/Grype

Grype

grype

A vulnerability scanner for container images and filesystems.

Runs as grype|macOS, Linux, Windows|github.com
Open form in Otty otty.toml

Command form

ai-draft · 2 tasks · 10 fields

Scan a container image, directory or SBOM with Grype. Only the flags quoted in Grype's own source are offered; ignore rules, DB and VEX options are left out.

Opens the form; the finished command lands at your prompt, unrun
Run in Otty
otty gui grype
Scan for vulnerabilitiesExample values, fixed in this page — nothing here reaches a terminal
Basic
Image, directory or SBOM*
string
Output format
string
Fail on severity
5 choicesenum
TasksEach one presets the form for one job
Scan a target
targetoutputfail_on
Fail the build on high severity
targetfail_onoutputfile
ParametersOnly these flags are editable in the form
Image, directory or SBOM
For example alpine:latest, ./my-project or sbom:./sbom.json. Leave empty to read an SBOM from standard input.
string · positional 0
Output format
string
-otablejsoncyclonedxtemplate
Write report to file
path
--file
Fail on severity
Exit non-zero when a vulnerability at or above this severity is found.
enum
--fail-onnegligiblelowmediumhighcritical
Source type
Force how the target is read, for example docker, registry, podman or containers-storage.
string
--fromdockerregistrypodmancontainers-storage
Platform
For example linux/arm64.
string
--platform
Distro to match
string
--distro
Exclude paths (glob)
string · repeatable
--exclude
Orient results by CVE
boolean
--by-cve
Target name
string
--name
SourcesEvery flag above is checked against these
src
Use: fmt.Sprintf("%s [IMAGE]", app.ID().Name), Short: "A vulnerability scanner for container images, filesystems, and SBOMs", Outputs []string // -o, <presenter>=<file> the Presenter hint string to use for report formatting and the output file File string // --file, the file to write report output to Distro string // --distro, specify a distro to explicitl…
helpmain 2026-10-27

github.com

Before it fills your prompt, Otty checks the installed grype against its version. A form that does not match your version is not offered.