Skip to content

chore: migrate from Trivy to Grype for vulnerability scanning#451

Open
JAORMX wants to merge 1 commit intomainfrom
chore/migrate-trivy-to-grype
Open

chore: migrate from Trivy to Grype for vulnerability scanning#451
JAORMX wants to merge 1 commit intomainfrom
chore/migrate-trivy-to-grype

Conversation

@JAORMX
Copy link
Collaborator

@JAORMX JAORMX commented Mar 20, 2026

Summary

  • Replace aquasecurity/trivy-action with anchore/scan-action (Grype) v7.3.2 in both build-containers.yml and periodic-security-scan.yml
  • Update JSON parsing for Grype output format in periodic security scan
  • Remove config/license/secret scanners (Grype focuses on vulnerability scanning)

Test plan

  • Verify Grype scan runs successfully on container image builds
  • Verify periodic security scan creates issues correctly with Grype JSON output
  • Check that SARIF results appear in Security tab

🤖 Generated with Claude Code

Replace aquasecurity/trivy-action with anchore/scan-action (Grype) v7.3.2
in both build-containers.yml and periodic-security-scan.yml.
Update JSON parsing for Grype output format.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant