Dagger
Search

grype

Scan a container image using Grype

Installation

dagger install github.com/opopops/daggerverse/grype@v1.7.1

Entrypoint

Return Type
Grype !
Arguments
NameTypeDefault ValueDescription
imageString !"cgr.dev/chainguard/wolfi-base:latest"wolfi-base image
versionString !"0.87"Grype version
userString !"65532"Image user
dockerConfigFile nullDocker config file
containerContainer nullNo description provided
Example
dagger -m github.com/opopops/daggerverse/grype@a6f7ead31d20adf1c014e48ff113cb10fdb0d2f8 call \
 --image string --version string --user string
func (m *MyModule) Example(image string, version string, user string) *dagger.Grype  {
	return dag.
			Grype(image, version, user)
}
@function
def example(image: str, version: str, user: str, ) -> dagger.Grype:
	return (
		dag.grype(image, version, user)
	)
@func()
example(image: string, version: string, user: string, ): Grype {
	return dag
		.grype(image, version, user)
}

Types

Grype 🔗

Grype CLI

container() 🔗

Returns configured grype container

Return Type
Container !
Example
dagger -m github.com/opopops/daggerverse/grype@a6f7ead31d20adf1c014e48ff113cb10fdb0d2f8 call \
 --image string --version string --user string container
func (m *MyModule) Example(image string, version string, user string) *dagger.Container  {
	return dag.
			Grype(image, version, user).
			Container()
}
@function
def example(image: str, version: str, user: str, ) -> dagger.Container:
	return (
		dag.grype(image, version, user)
		.container()
	)
@func()
example(image: string, version: string, user: string, ): Container {
	return dag
		.grype(image, version, user)
		.container()
}

scan() 🔗

Scan

Return Type
File !
Arguments
NameTypeDefault ValueDescription
sourceString !-

Source to scan

severityCutoffString !""

Specify the minimum vulnerability severity to trigger an “error” level ACS result

failBoolean !true

Set to false to avoid failing based on severity-cutoff

outputFormatString !"sarif"

Report output formatter

Example
dagger -m github.com/opopops/daggerverse/grype@a6f7ead31d20adf1c014e48ff113cb10fdb0d2f8 call \
 --image string --version string --user string scan --source string --severity-cutoff string --fail boolean --output-format string
func (m *MyModule) Example(image string, version string, user string, source string, severityCutoff string, fail bool, outputFormat string) *dagger.File  {
	return dag.
			Grype(image, version, user).
			Scan(source, severityCutoff, fail, outputFormat)
}
@function
def example(image: str, version: str, user: str, source: str, severity_cutoff: str, fail: bool, output_format: str) -> dagger.File:
	return (
		dag.grype(image, version, user)
		.scan(source, severity_cutoff, fail, output_format)
	)
@func()
example(image: string, version: string, user: string, source: string, severityCutoff: string, fail: boolean, outputFormat: string): File {
	return dag
		.grype(image, version, user)
		.scan(source, severityCutoff, fail, outputFormat)
}

scanDirectory() 🔗

Scan directory

Return Type
File !
Arguments
NameTypeDefault ValueDescription
sourceDirectory !-

Directory to scan

sourceTypeString "dir"No description provided
severityCutoffString nullNo description provided
failBoolean !true

Set to false to avoid failing based on severity-cutoff

outputFormatString !"sarif"

Report output formatter

Example
dagger -m github.com/opopops/daggerverse/grype@a6f7ead31d20adf1c014e48ff113cb10fdb0d2f8 call \
 --image string --version string --user string scan-directory --source DIR_PATH --fail boolean --output-format string
func (m *MyModule) Example(image string, version string, user string, source *dagger.Directory, fail bool, outputFormat string) *dagger.File  {
	return dag.
			Grype(image, version, user).
			ScanDirectory(source, fail, outputFormat)
}
@function
def example(image: str, version: str, user: str, source: dagger.Directory, fail: bool, output_format: str) -> dagger.File:
	return (
		dag.grype(image, version, user)
		.scan_directory(source, fail, output_format)
	)
@func()
example(image: string, version: string, user: string, source: Directory, fail: boolean, outputFormat: string): File {
	return dag
		.grype(image, version, user)
		.scanDirectory(source, fail, outputFormat)
}

scanFile() 🔗

Scan file

Return Type
File !
Arguments
NameTypeDefault ValueDescription
sourceFile !-

File to scan

sourceTypeString !"file"

Source type

severityCutoffString !""

Specify the minimum vulnerability severity to trigger an “error” level ACS result

failBoolean !true

Set to false to avoid failing based on severity-cutoff

outputFormatString !"sarif"

Report output formatter

Example
dagger -m github.com/opopops/daggerverse/grype@a6f7ead31d20adf1c014e48ff113cb10fdb0d2f8 call \
 --image string --version string --user string scan-file --source file:path --source-type string --severity-cutoff string --fail boolean --output-format string
func (m *MyModule) Example(image string, version string, user string, source *dagger.File, sourceType string, severityCutoff string, fail bool, outputFormat string) *dagger.File  {
	return dag.
			Grype(image, version, user).
			ScanFile(source, sourceType, severityCutoff, fail, outputFormat)
}
@function
def example(image: str, version: str, user: str, source: dagger.File, source_type: str, severity_cutoff: str, fail: bool, output_format: str) -> dagger.File:
	return (
		dag.grype(image, version, user)
		.scan_file(source, source_type, severity_cutoff, fail, output_format)
	)
@func()
example(image: string, version: string, user: string, source: File, sourceType: string, severityCutoff: string, fail: boolean, outputFormat: string): File {
	return dag
		.grype(image, version, user)
		.scanFile(source, sourceType, severityCutoff, fail, outputFormat)
}

scanImage() 🔗

Scan container image

Return Type
File !
Arguments
NameTypeDefault ValueDescription
sourceString !-

Image to scan

sourceTypeString !"registry"

Source type

severityCutoffString !""

Specify the minimum vulnerability severity to trigger an “error” level ACS result

failBoolean !true

Set to false to avoid failing based on severity-cutoff

outputFormatString !"sarif"

Report output formatter

Example
dagger -m github.com/opopops/daggerverse/grype@a6f7ead31d20adf1c014e48ff113cb10fdb0d2f8 call \
 --image string --version string --user string scan-image --source string --source-type string --severity-cutoff string --fail boolean --output-format string
func (m *MyModule) Example(image string, version string, user string, source string, sourceType string, severityCutoff string, fail bool, outputFormat string) *dagger.File  {
	return dag.
			Grype(image, version, user).
			ScanImage(source, sourceType, severityCutoff, fail, outputFormat)
}
@function
def example(image: str, version: str, user: str, source: str, source_type: str, severity_cutoff: str, fail: bool, output_format: str) -> dagger.File:
	return (
		dag.grype(image, version, user)
		.scan_image(source, source_type, severity_cutoff, fail, output_format)
	)
@func()
example(image: string, version: string, user: string, source: string, sourceType: string, severityCutoff: string, fail: boolean, outputFormat: string): File {
	return dag
		.grype(image, version, user)
		.scanImage(source, sourceType, severityCutoff, fail, outputFormat)
}

withRegistryAuth() 🔗

Authenticate with registry

Return Type
Grype !
Arguments
NameTypeDefault ValueDescription
usernameString !-

Registry username

secretSecret !-

Registry password

addressString !"docker.io"

Registry host

Example
dagger -m github.com/opopops/daggerverse/grype@a6f7ead31d20adf1c014e48ff113cb10fdb0d2f8 call \
 --image string --version string --user string with-registry-auth --username string --secret env:MYSECRET --address string
func (m *MyModule) Example(image string, version string, user string, username string, secret *dagger.Secret, address string) *dagger.Grype  {
	return dag.
			Grype(image, version, user).
			WithRegistryAuth(username, secret, address)
}
@function
def example(image: str, version: str, user: str, username: str, secret: dagger.Secret, address: str) -> dagger.Grype:
	return (
		dag.grype(image, version, user)
		.with_registry_auth(username, secret, address)
	)
@func()
example(image: string, version: string, user: string, username: string, secret: Secret, address: string): Grype {
	return dag
		.grype(image, version, user)
		.withRegistryAuth(username, secret, address)
}

withScan() 🔗

Scan (for chaining)

Return Type
Grype !
Arguments
NameTypeDefault ValueDescription
sourceString !-

Source to scan

severityCutoffString !""

Specify the minimum vulnerability severity to trigger an “error” level ACS result

failBoolean !true

Set to false to avoid failing based on severity-cutoff

outputFormatString !"sarif"

Report output formatter

Example
dagger -m github.com/opopops/daggerverse/grype@a6f7ead31d20adf1c014e48ff113cb10fdb0d2f8 call \
 --image string --version string --user string with-scan --source string --severity-cutoff string --fail boolean --output-format string
func (m *MyModule) Example(image string, version string, user string, source string, severityCutoff string, fail bool, outputFormat string) *dagger.Grype  {
	return dag.
			Grype(image, version, user).
			WithScan(source, severityCutoff, fail, outputFormat)
}
@function
def example(image: str, version: str, user: str, source: str, severity_cutoff: str, fail: bool, output_format: str) -> dagger.Grype:
	return (
		dag.grype(image, version, user)
		.with_scan(source, severity_cutoff, fail, output_format)
	)
@func()
example(image: string, version: string, user: string, source: string, severityCutoff: string, fail: boolean, outputFormat: string): Grype {
	return dag
		.grype(image, version, user)
		.withScan(source, severityCutoff, fail, outputFormat)
}

withScanDirectory() 🔗

Scan dir (for chaining)

Return Type
Grype !
Arguments
NameTypeDefault ValueDescription
sourceDirectory !-

Directory to scan

sourceTypeString !"registry"

Source type

severityCutoffString !""

Specify the minimum vulnerability severity to trigger an “error” level ACS result

failBoolean !true

Set to false to avoid failing based on severity-cutoff

outputFormatString !"sarif"

Report output formatter

Example
dagger -m github.com/opopops/daggerverse/grype@a6f7ead31d20adf1c014e48ff113cb10fdb0d2f8 call \
 --image string --version string --user string with-scan-directory --source DIR_PATH --source-type string --severity-cutoff string --fail boolean --output-format string
func (m *MyModule) Example(image string, version string, user string, source *dagger.Directory, sourceType string, severityCutoff string, fail bool, outputFormat string) *dagger.Grype  {
	return dag.
			Grype(image, version, user).
			WithScanDirectory(source, sourceType, severityCutoff, fail, outputFormat)
}
@function
def example(image: str, version: str, user: str, source: dagger.Directory, source_type: str, severity_cutoff: str, fail: bool, output_format: str) -> dagger.Grype:
	return (
		dag.grype(image, version, user)
		.with_scan_directory(source, source_type, severity_cutoff, fail, output_format)
	)
@func()
example(image: string, version: string, user: string, source: Directory, sourceType: string, severityCutoff: string, fail: boolean, outputFormat: string): Grype {
	return dag
		.grype(image, version, user)
		.withScanDirectory(source, sourceType, severityCutoff, fail, outputFormat)
}

withScanFile() 🔗

Scan file (for chaining)

Return Type
Grype !
Arguments
NameTypeDefault ValueDescription
sourceFile !-

File to scan

sourceTypeString !"registry"

Source type

severityCutoffString !""

Specify the minimum vulnerability severity to trigger an “error” level ACS result

failBoolean !true

Set to false to avoid failing based on severity-cutoff

outputFormatString !"sarif"

Report output formatter

Example
dagger -m github.com/opopops/daggerverse/grype@a6f7ead31d20adf1c014e48ff113cb10fdb0d2f8 call \
 --image string --version string --user string with-scan-file --source file:path --source-type string --severity-cutoff string --fail boolean --output-format string
func (m *MyModule) Example(image string, version string, user string, source *dagger.File, sourceType string, severityCutoff string, fail bool, outputFormat string) *dagger.Grype  {
	return dag.
			Grype(image, version, user).
			WithScanFile(source, sourceType, severityCutoff, fail, outputFormat)
}
@function
def example(image: str, version: str, user: str, source: dagger.File, source_type: str, severity_cutoff: str, fail: bool, output_format: str) -> dagger.Grype:
	return (
		dag.grype(image, version, user)
		.with_scan_file(source, source_type, severity_cutoff, fail, output_format)
	)
@func()
example(image: string, version: string, user: string, source: File, sourceType: string, severityCutoff: string, fail: boolean, outputFormat: string): Grype {
	return dag
		.grype(image, version, user)
		.withScanFile(source, sourceType, severityCutoff, fail, outputFormat)
}

withScanImage() 🔗

Scan container image (for chaining)

Return Type
Grype !
Arguments
NameTypeDefault ValueDescription
sourceString !-

Image to scan

sourceTypeString !"registry"

Source type

severityCutoffString !""

Specify the minimum vulnerability severity to trigger an “error” level ACS result

failBoolean !true

Set to false to avoid failing based on severity-cutoff

outputFormatString !"sarif"

Report output formatter

Example
dagger -m github.com/opopops/daggerverse/grype@a6f7ead31d20adf1c014e48ff113cb10fdb0d2f8 call \
 --image string --version string --user string with-scan-image --source string --source-type string --severity-cutoff string --fail boolean --output-format string
func (m *MyModule) Example(image string, version string, user string, source string, sourceType string, severityCutoff string, fail bool, outputFormat string) *dagger.Grype  {
	return dag.
			Grype(image, version, user).
			WithScanImage(source, sourceType, severityCutoff, fail, outputFormat)
}
@function
def example(image: str, version: str, user: str, source: str, source_type: str, severity_cutoff: str, fail: bool, output_format: str) -> dagger.Grype:
	return (
		dag.grype(image, version, user)
		.with_scan_image(source, source_type, severity_cutoff, fail, output_format)
	)
@func()
example(image: string, version: string, user: string, source: string, sourceType: string, severityCutoff: string, fail: boolean, outputFormat: string): Grype {
	return dag
		.grype(image, version, user)
		.withScanImage(source, sourceType, severityCutoff, fail, outputFormat)
}