Unable to use Grype from GitLab CI/CD

[kuwv]

What happened:

GitLab utilizes shells of container images to run CI/CD jobs. The Grype container doesn't not provide any shells. While the distroless images do provide a focused base image for CLI images it prevents Grype from being used by all CI/CD platforms where it is intended.

What you expected to happen:

GitLab should be able to utilize a shell and perform any additional pre/post setup actions for Grype.

Steps to reproduce the issue:

Create a project with a pipeline on GitLab.com (or any CI/CD utilizing shells) and attempt to use Grype:

image:
  name: docker.io/anchore/syft:v0.82.0
  entrypoint: ''

Anything else we need to know?:
https://docs.gitlab.com/ee/ci/docker/using_docker_images.html#override-the-entrypoint-of-an-image
anchore/syft#833
anchore/syft#1858

[kzantow]

Hi @kuwv, we currently publish a -debug tag, in the format: anchore/grype:<version>-debug (introduced in PR 1106). This should provide a shell that is compatible with GitLab. Would you be able to try this and see if it works for you?

[wagoodman]

We can do the same suggestion here anchore/syft#1858 (comment)

[spiffcs]

Linked answer from anchore/syft#1858 (comment)

I've also added a new grype job to that gitlab repo. It shows how the debug image can be invoked.

Let me know if you have other questions on this one and I can reopen if the images are still not functioning as intended

[kuwv]

Yeah, I'm installing from apk for now. It probably won't in siloed environments though.