Apps

Grype ships a single binary, the grype CLI. There are no separate services or daemons in this repository.

• CLI — the grype command, its subcommands, exit codes, and configuration.

The same binary is distributed as:

• A native executable via Homebrew, Chocolatey, MacPorts, the install.sh script, or directly from GitHub Releases.
• A Docker image at ghcr.io/anchore/grype and docker.io/anchore/grype, in three variants:
  • Default (Dockerfile) — root user.
  • Debug (Dockerfile.debug) — bundles a shell for inspection.
  • Nonroot (Dockerfile.nonroot) — recommended for restricted environments.

Distribution mechanics are handled by goreleaser (.goreleaser.yaml) and the release.yaml GitHub Actions workflow.