grype

Ansible Role GitHub tag (latest SemVer) GitHub repo size

Ansible Role: grype

Role to install (by default) grype on Debian/Ubuntu and EL systems. A vulnerability scanner for container images and filesystems.

Requirements

None.

Role Variables

Available variables are listed below (located in defaults/main.yml):

Variables list:

grype_app: grype
grype_desired_state: present
grype_version: 0.80.0
grype_os: "{{ ansible_system | lower }}"
grype_architecture_map:
  amd64: amd64
  arm: arm64
  x86_64: amd64
  armv6l: armv6
  armv7l: armv7
  aarch64: arm64
  32-bit: "386"
  64-bit: amd64

# For Debian/Ubuntu Family
grype_debian_url: "https://github.com/anchore/{{ grype_app }}/releases/download/v{{ grype_version }}/{{ grype_app }}_{{ grype_version }}_{{ grype_os }}_{{ grype_architecture_map[ansible_architecture] }}.deb"

# For EL Family
grype_el_url: "https://github.com/anchore/{{ grype_app }}/releases/download/v{{ grype_version }}/{{ grype_app }}_{{ grype_version }}_{{ grype_os }}_{{ grype_architecture_map[ansible_architecture] }}.rpm"

Variables table:

Variable	Description
grype_app	Defines the app to install i.e. grype
grype_desired_state	Defined to dynamically chose whether to install (i.e. either `present` or `latest`) or uninstall (i.e. `absent`) the package. Defaults to `present`.
grype_version	Defined to dynamically fetch the desired version to install. Defaults to: 0.80.0
grype_os	Defines os type. Used for obtaining the correct type of binaries based on OS type.
grype_architecture_map	Defines os architecture. Used for obtaining the correct type of binaries based on OS System Architecture.
grype_debian_url	Defines URL to download the 'deb' package from for Debian/Ubuntu family systems.
grype_el_url	Defines URL to download the 'rpm' package from for EL family systems.

Dependencies

None

Example Playbook

For default behaviour of role (i.e. installation of grype) in ansible playbooks.

- hosts: servers
  roles:
    - darkwizard242.grype

For customizing behavior of role (i.e. specifying the desired grype version) in ansible playbooks.

- hosts: servers
  roles:
    - darkwizard242.grype
  vars:
    grype_version: 0.27.3

For customizing behavior of role (i.e. different os architecture of grype package like arm64) in ansible playbooks.

- hosts: servers
  roles:
    - darkwizard242.grype
  vars:
    grype_arch: "arm64"

License

MIT

Author Information

This role was created by Ali Muhammad

About

Installs/Uninstalls 'grype'. A vulnerability scanner for container images and filesystems.

role grype vulnerability scanner container images filesystems os linux

Install

ansible-galaxy install darkwizard242/ansible-role-grype

GitHub repository

4 stars

0 forks

0 open issues

License

mit

Downloads

1969

Owner

Ali Muhammad

Senior DevOps/CloudOps Engineer. Dedicated to Automating everything I come across. Love to work on and learn new technologies/tools everyday!