anchore / anchore/grype

Run Grype scan of files given from text file containing filelist

Open
#562 2 comments 2 reactions 0 assignees View on GitHub
enhancement multiple-sources
Dominant language
Go
Stars
12.9k
Forks
880
Avg merge
3d 6h
Merged PRs (30d)
25

Description

What would you like to be added:
Run Grype scan of files given from text file containing file list.

Why is this needed:
When Grype is executed, it scans the pointed directory. However, it would be very useful if Grype has some functionality to scan only files specified in a text file.

Additional context:
Like "grype -i files-to-scan.txt"

files-to-scan.txt:
/etc/directory/file1.jar
/opt/directory/file2.jar
...
/var/directory/filex.jar

Also, JSON output, in this case, should contain an absolute path of the .artifact.locations[].path

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the proposed `grype -i files-to-scan.txt` workflow using the sample file list and inspect the current CLI behavior. Done means Grype scans only the listed files and JSON output reports absolute paths in `.artifact.locations[].path`.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
cli, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.