Remove Grype from Container Scanning
Why are we doing this work
Support for Grype in Container Scanning is deprecated in GitLab 16.9.
This issue removes the Grype code from the GitLab Container Scanning analyzer, and updates user documentation to remove mentions of Grype.
Relevant links
- Deprecation issue: #439164 (closed)
Non-functional requirements
-
Documentation: -
Feature flag: -
Performance: -
Testing:
Implementation plan
-
⚠ This is a breaking change that must be merged in the temporaryv7.x
branch instead ofmaster
-
⚠ Keep the scheduled pipeline to rebuild previous major versions of CS for the Grype analyzer!!! We need to maintain its support until 18.0 for major version 5 and 19.0 for major version 6. -
Remove any codebase and tests related to Grype in the Container Scanning project -
Remove any mention of Grype in the user documentation https://docs.gitlab.com/ee/user/application_security/container_scanning/
Verification steps
Edited by Nick Ilieskou