Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/darkwizard242/ansible-role-grype

Ansible role for 'grype'. Available on Ansible Galaxy.
https://github.com/darkwizard242/ansible-role-grype

ansible ansible-galaxy ansible-role container-images grype linux vulnerability-scanner

Last synced: 22 days ago
JSON representation

Ansible role for 'grype'. Available on Ansible Galaxy.

Host: GitHub
URL: https://github.com/darkwizard242/ansible-role-grype
Owner: darkwizard242
License: mit
Created: 2021-12-24T19:40:26.000Z (almost 3 years ago)
Default Branch: master
Last Pushed: 2024-10-21T22:05:38.000Z (27 days ago)
Last Synced: 2024-10-22T18:12:48.204Z (26 days ago)
Topics: ansible, ansible-galaxy, ansible-role, container-images, grype, linux, vulnerability-scanner
Language: Python
Homepage: https://galaxy.ansible.com/darkwizard242/grype
Size: 108 KB
Stars: 4
Watchers: 3
Forks: 0
Open Issues: 0
Metadata Files:
- Readme: README.md
- License: LICENSE

Awesome Lists containing this project

README

        [![build-test](https://github.com/darkwizard242/ansible-role-grype/workflows/build-and-test/badge.svg?branch=master)](https://github.com/darkwizard242/ansible-role-grype/actions?query=workflow%3Abuild-and-test) [![release](https://github.com/darkwizard242/ansible-role-grype/workflows/release/badge.svg)](https://github.com/darkwizard242/ansible-role-grype/actions?query=workflow%3Arelease) ![Ansible Role](https://img.shields.io/ansible/role/d/darkwizard242/grype) [![Maintainability Rating](https://sonarcloud.io/api/project_badges/measure?project=ansible-role-grype&metric=sqale_rating)](https://sonarcloud.io/dashboard?id=ansible-role-grype) [![Reliability Rating](https://sonarcloud.io/api/project_badges/measure?project=ansible-role-grype&metric=reliability_rating)](https://sonarcloud.io/dashboard?id=ansible-role-grype) [![Security Rating](https://sonarcloud.io/api/project_badges/measure?project=ansible-role-grype&metric=security_rating)](https://sonarcloud.io/dashboard?id=ansible-role-grype) ![GitHub tag (latest SemVer)](https://img.shields.io/github/tag/darkwizard242/ansible-role-grype?label=release) ![GitHub repo size](https://img.shields.io/github/repo-size/darkwizard242/ansible-role-grype?color=orange&style=flat-square)

# Ansible Role: grype

Role to install (_by default_) [grype](https://github.com/anchore/grype) on **Debian/Ubuntu** and **EL** systems. A vulnerability scanner for container images and filesystems.

## Requirements

None.

## Role Variables

Available variables are listed below (located in `defaults/main.yml`):

### Variables list:

```yaml

grype_app: grype

grype_desired_state: present

grype_version: 0.82.2

grype_os: "{{ ansible_system | lower }}"

grype_architecture_map:

  amd64: amd64

  arm: arm64

  x86_64: amd64

  armv6l: armv6

  armv7l: armv7

  aarch64: arm64

  32-bit: "386"

  64-bit: amd64

# For Debian/Ubuntu Family

grype_debian_url: "https://github.com/anchore/{{ grype_app }}/releases/download/v{{ grype_version }}/{{ grype_app }}_{{ grype_version }}_{{ grype_os }}_{{ grype_architecture_map[ansible_architecture] }}.deb"

# For EL Family

grype_el_url: "https://github.com/anchore/{{ grype_app }}/releases/download/v{{ grype_version }}/{{ grype_app }}_{{ grype_version }}_{{ grype_os }}_{{ grype_architecture_map[ansible_architecture] }}.rpm"

```

### Variables table:

Variable               | Description

---------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------

grype_app              | Defines the app to install i.e. **grype**

grype_desired_state    | Defined to dynamically chose whether to install (i.e. either `present` or `latest`) or uninstall (i.e. `absent`) the package. Defaults to `present`.

grype_version          | Defined to dynamically fetch the desired version to install. Defaults to: **0.82.2**

grype_os               | Defines os type. Used for obtaining the correct type of binaries based on OS type.

grype_architecture_map | Defines os architecture. Used for obtaining the correct type of binaries based on OS System Architecture.

grype_debian_url       | Defines URL to download the 'deb' package from for Debian/Ubuntu family systems.

grype_el_url           | Defines URL to download the 'rpm' package from for EL family systems.

## Dependencies

None

## Example Playbook

For default behaviour of role (i.e. installation of **grype**) in ansible playbooks.

```yaml

- hosts: servers

  roles:

    - darkwizard242.grype

```

For customizing behavior of role (i.e. specifying the desired **grype** version) in ansible playbooks.

```yaml

- hosts: servers

  roles:

    - darkwizard242.grype

  vars:

    grype_version: 0.27.3

```

For customizing behavior of role (i.e. different os architecture of **grype** package like arm64) in ansible playbooks.

```yaml

- hosts: servers

  roles:

    - darkwizard242.grype

  vars:

    grype_arch: "arm64"

```

## License

[MIT](https://github.com/darkwizard242/ansible-role-grype/blob/master/LICENSE)

## Author Information

This role was created by [Ali Muhammad](https://www.alimuhammad.dev)