Add reference to Grype-based GitHub Action (#710)

Signed-off-by: Dan Luhring <dan+github@luhrings.com>
This commit is contained in:
SALES 2022-05-02 07:03:19 +11:00 committed by GitHub
parent 36f5150fa9
commit 7fc4ca7646
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -66,6 +66,10 @@ brew install grype
**Note**: Currently, Grype is built only for macOS and Linux.
### GitHub Actions
If you're using GitHub Actions, you can simply use our [Grype-based action](https://github.com/marketplace/actions/anchore-container-scan) to run vulnerability scans on your code or container images during your CI workflows.
## Getting started
[Install the binary](#installation), and make sure that `grype` is available in your path. To scan for vulnerabilities in an image: