Skip to content

Commit 2507fc9

Browse files
anchore_grype docs: add info about --by-cve (#12874)
* anchore_grype docs: add info about --by-cve * Update anchore_grype.md --------- Co-authored-by: Paul Osinski <42211303+paulOsinski@users.noreply.github.com>
1 parent 18b7c7f commit 2507fc9

1 file changed

Lines changed: 5 additions & 0 deletions

File tree

docs/content/en/connecting_your_tools/parsers/file/anchore_grype.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,11 @@ Anchore Grype JSON files are created using the Grype CLI, using the '--output=js
1212
grype yourApp/example-page --output=json=example_vulns.json
1313
{{< /highlight >}}
1414

15+
It's possible to instruct Anchore to organize all findings by CVE (vs GHSA, RHSA, etc) using the `--by-cve` parameter.
16+
Considerations:
17+
- Using `--by-cve` could lead to more, or different Findings being created as some advisories fix multiple CVEs at once.
18+
- We recommend you consistently choose whether to use this flag or not in your report generation. Mixing reports generated with `--by-cve` and without (via Reimport, for example) can lead to unpredictable results, such as mismatched Hash Codes.
19+
1520
### Acceptable JSON Format
1621
All properties are expected as strings and are required by the parser.
1722

0 commit comments

Comments
 (0)