Skip to content

Add documentation for Grype scanner maintenance

Dan Luhring requested to merge danluhring/container-scanning:document-process-to-update-grype into master

Hi @thiagocsf and gang —

I wanted to make sure to document any knowledge/context required to maintain the Grype integration with Container Scanning. So I created a GRYPE.md file within the doc directory (next to DEVELOPING.md). As you'll see, this file explains how to keep Grype up-to-date, how to report bugs in Grype (i.e. separately from bugs with Container Scanning), and how to reach the Grype maintainers.

We considered keeping this documentation on the Anchore side, but it seems like it could be helpful to anyone involved — Anchore staff, GitLab staff, and anyone else in the world that contributes to the project.

I'm unopinionated on what form this documentation takes and where it lives, so please let me know what suggestions you have on location, form, or content.

Let me know what you think! 🤓

Merge request reports