Skip to content

chore: migrate from Trivy to Grype for vulnerability scanning#451

Merged
eleftherias merged 1 commit intomainfrom
chore/migrate-trivy-to-grype
Mar 26, 2026
Merged

chore: migrate from Trivy to Grype for vulnerability scanning#451
eleftherias merged 1 commit intomainfrom
chore/migrate-trivy-to-grype

Conversation

@JAORMX
Copy link
Copy Markdown
Collaborator

@JAORMX JAORMX commented Mar 20, 2026

Summary

  • Replace aquasecurity/trivy-action with anchore/scan-action (Grype) v7.3.2 in both build-containers.yml and periodic-security-scan.yml
  • Update JSON parsing for Grype output format in periodic security scan
  • Remove config/license/secret scanners (Grype focuses on vulnerability scanning)

Test plan

  • Verify Grype scan runs successfully on container image builds
  • Verify periodic security scan creates issues correctly with Grype JSON output
  • Check that SARIF results appear in Security tab

🤖 Generated with Claude Code

Replace aquasecurity/trivy-action with anchore/scan-action (Grype) v7.3.2
in both build-containers.yml and periodic-security-scan.yml.
Update JSON parsing for Grype output format.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@eleftherias eleftherias merged commit fc967ed into main Mar 26, 2026
2 checks passed
@eleftherias eleftherias deleted the chore/migrate-trivy-to-grype branch March 26, 2026 09:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants