grype

package

v0.16.2 Latest Latest Go to latest Published: Jul 7, 2026 License: Apache-2.0 Imports: 20 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/bomly-dev/bomly-cli

Links

Open Source Insights

Documentation ¶

Overview ¶

Package grype implements a Matcher that uses the Grype vulnerability library (builtin) or the grype CLI binary (external), selected via build tags.

Index ¶

type Matcher

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Matcher ¶

type Matcher struct {
	// DBDir is the directory that contains the Grype vulnerability database.
	// Defaults to the OS cache directory / grype / db.
	DBDir string
	// Logger receives diagnostic messages. Maybe nil (no-op).
	Logger *zap.Logger
	// DistConfigOverride overrides the default distribution config (e.g., LatestURL).
	DistConfigOverride any
}

Matcher uses the Grype library or CLI to match packages against a vulnerability database.

func (Matcher) Applicable ¶

func (a Matcher) Applicable(_ context.Context, _ sdk.MatchRequest) (bool, error)

func (Matcher) Descriptor ¶

func (a Matcher) Descriptor() sdk.MatcherDescriptor

Descriptor returns the registration metadata for the Grype matcher.

func (Matcher) Match ¶

func (a Matcher) Match(_ context.Context, req sdk.MatchRequest) (sdk.MatchResult, error)

Match attaches Grype vulnerability matches to packages in the graph.

func (Matcher) Ready ¶

func (a Matcher) Ready(context.Context, sdk.MatchRequest) error

Ready reports whether the bundled Grype matcher can run. The database may be downloaded during Match on first use, so a missing cache does not make the matcher unavailable.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL