Ansible Role: grype

This role installs grype by default on Debian/Ubuntu and EL systems. Grype is a tool used to scan for vulnerabilities in container images and file systems.

Requirements

No special requirements.

Role Variables

Below are the available variables (found in defaults/main.yml):

List of Variables:

grype_app: grype
grype_desired_state: present
grype_version: 0.80.0
grype_os: "{{ ansible_system | lower }}"
grype_architecture_map:
  amd64: amd64
  arm: arm64
  x86_64: amd64
  armv6l: armv6
  armv7l: armv7
  aarch64: arm64
  32-bit: "386"
  64-bit: amd64

# URL for Debian/Ubuntu systems
grype_debian_url: "https://github.com/anchore/{{ grype_app }}/releases/download/v{{ grype_version }}/{{ grype_app }}_{{ grype_version }}_{{ grype_os }}_{{ grype_architecture_map[ansible_architecture] }}.deb"

# URL for EL systems
grype_el_url: "https://github.com/anchore/{{ grype_app }}/releases/download/v{{ grype_version }}/{{ grype_app }}_{{ grype_version }}_{{ grype_os }}_{{ grype_architecture_map[ansible_architecture] }}.rpm"

Variables Overview:

Dependencies

No dependencies.

Example Playbook

Default behavior for installing grype in Ansible playbooks:

- hosts: servers
  roles:
    - darkwizard242.grype

Custom behavior for specifying the desired grype version:

- hosts: servers
  roles:
    - darkwizard242.grype
  vars:
    grype_version: 0.27.3

Custom behavior for using a different OS architecture of grype (e.g., arm64):

- hosts: servers
  roles:
    - darkwizard242.grype
  vars:
    grype_arch: "arm64"

License

MIT

Author Information

This role was created by Ali Muhammad