--- title: Install Grype - Container Vulnerability Scanner on Arch Linux using the Snap Store | Snapcraft description: Get the latest version of Grype - Container Vulnerability Scanner for on Arch Linux - Vulnerability scanner url: https://snapcraft.io/install/grype/arch --- [Canonical Snapcraft](https://snapcraft.io/) # Install Grype - Container Vulnerability Scanner on **Arch Linux** # Grype - Container Vulnerability Scanner (grype) [Alan Pope (popey)](https://snapcraft.io/publisher/popey "View all snaps from Alan Pope (popey)") * [Alan Pope (popey)](https://snapcraft.io/publisher/popey "View all snaps from Alan Pope (popey)") * [Development](https://snapcraft.io/search?categories=development) * [Security](https://snapcraft.io/search?categories=security) [Install](https://snapcraft.io/install/grype/arch#install) [ ](https://res.cloudinary.com/canonical/image/fetch/f_webm/https://dashboard.snapcraft.io/site_media/appmedia/2024/09/grype-1726137786.gif) #### Vulnerability scanner A vulnerability scanner for container images and filesystems. Easily install the binary to try it out. Works with Syft, the powerful SBOM (software bill of materials) tool for container images and filesystems. **Features** Scan the contents of a container image or filesystem to find known vulnerabilities. Find vulnerabilities for major operating system packages: * Alpine * Amazon Linux * BusyBox * CentOS * CBL-Mariner * Debian * Distroless * Oracle Linux * Red Hat (RHEL) * Ubuntu * Wolfi Find vulnerabilities for language-specific packages: * Ruby (Gems) * Java (JAR, WAR, EAR, JPI, HPI) * JavaScript (NPM, Yarn) * Python (Egg, Wheel, Poetry, requirements.txt/setup.py files) * Dotnet (deps.json) * Golang (go.mod) * PHP (Composer) * Rust (Cargo) * Supports Docker, OCI and Singularity image formats. * OpenVEX support for filtering and augmenting scanning results. If you encounter an issue, please let us know using the issue tracker. **Installation** ``` snap install grype ``` **Getting Started** To scan for vulnerabilities in an image: ``` grype ``` The above command scans for vulnerabilities that are visible in the container (i.e., the squashed representation of the image). To include software from all image layers in the vulnerability scan, regardless of its presence in the final image, provide `--scope all-layers`: ``` grype --scope all-layers ``` **Supported sources** Grype can scan a variety of sources beyond those found in Docker. ``` # scan a container image archive (from the result of `docker image save ...`, `podman save ...`, or `skopeo copy` commands) grype path/to/image.tar # scan a Singularity Image Format (SIF) container grype path/to/image.sif # scan a directory grype dir:path/to/dir ``` Sources can be explicitly provided with a scheme: ``` podman:yourrepo/yourimage:tag use images from the Podman daemon docker:yourrepo/yourimage:tag use images from the Docker daemon docker-archive:path/to/yourimage.tar use a tarball from disk for archives created from "docker save" oci-archive:path/to/yourimage.tar use a tarball from disk for OCI archives (from Skopeo or otherwise) oci-dir:path/to/yourimage read directly from a path on disk for OCI layout directories (from Skopeo or otherwise) singularity:path/to/yourimage.sif read directly from a Singularity Image Format (SIF) container on disk dir:path/to/yourproject read directly from a path on disk (any directory) sbom:path/to/syft.json read Syft JSON from path on disk registry:yourrepo/yourimage:tag pull image directly from a registry (no container runtime required) ``` If an image source is not provided and cannot be detected from the given reference it is assumed the image should be pulled from the Docker daemon. If docker is not present, then the Podman daemon is attempted next, followed by reaching out directly to the image registry last. **Output Formats** The output format for Grype is configurable as well: ``` grype -o ``` Where the formats available are: * `table`: A columnar summary (default). * `cyclonedx`: An XML report conforming to the CycloneDX 1.6 specification. * `cyclonedx-json`: A JSON report conforming to the CycloneDX 1.6 specification. * `json`: Use this to get as much information out of Grype as possible! * `sarif`: Use this option to get a SARIF report (Static Analysis Results Interchange Format) * `template`: Lets the user specify the output format. **Documentation** Our GitHub contains further details: For commercial support options with Syft or Grype, please contact Anchore \*This prototype Grype snap is built using the configuration here: [https://github.com/popey/grype-snap\*](https://github.com/popey/grype-snap*) ### Package name * grype --- ### License * Apache-2.0 --- ### Last updated * 20 October 2026 - latest/stable * 19 October 2026 - latest/edge --- ### Websites * [anchore.com](https://anchore.com/opensource "https://anchore.com/opensource") --- ### Contact * [anchore.com](https://anchore.com/discourse "https://anchore.com/discourse") --- ### Source code * [github.com/anchore/grype](https://github.com/anchore/grype "https://github.com/anchore/grype") * [github.com/popey/grype-snap](https://github.com/popey/grype-snap "https://github.com/popey/grype-snap") --- ### Report a bug * [github.com/anchore/grype/issues](https://github.com/anchore/grype/issues "https://github.com/anchore/grype/issues") --- ##### Report a Snap Store violation * [Report this Snap](https://snapcraft.io/install/grype/arch#report-snap-modal) --- ## Enable snaps on Arch Linux and install Grype - Container Vulnerability Scanner Snaps are applications packaged with all their dependencies to run on all popular Linux distributions from a single build. They update automatically and roll back gracefully. Snaps are discoverable and installable from the [Snap Store](https://snapcraft.io/store), an app store with an audience of millions. ### Enable snapd On Arch Linux, snap can be installed from the [Arch User Repository (AUR).](https://aur.archlinux.org/packages/snapd/) The [manual build process](https://wiki.archlinux.org/index.php/Arch_User_Repository#Installing_packages) is the Arch-supported install method for AUR packages, and you’ll need the [prerequisites](https://wiki.archlinux.org/index.php/Arch_User_Repository#Prerequisites) installed before you can install any AUR package. You can then install snap with the following: ``` git clone https://aur.archlinux.org/snapd.git cd snapd makepkg -si ``` Once installed, the *systemd* unit that manages the main snap communication socket needs to be enabled: ``` sudo systemctl enable --now snapd.socket ``` If [AppArmor](https://wiki.archlinux.org/title/AppArmor) is enabled in your system, enable the service which loads AppArmor profiles for snaps: ``` sudo systemctl enable --now snapd.apparmor.service ``` To enable *classic* snap support, enter the following to create a symbolic link between `/var/lib/snapd/snap` and `/snap`: ``` sudo ln -s /var/lib/snapd/snap /snap ``` Either log out and back in again, or restart your system, to ensure snap’s paths are updated correctly. ### Install Grype - Container Vulnerability Scanner To install Grype - Container Vulnerability Scanner, simply use the following command: ``` sudo snap install grype --classic ``` ### Other popular snaps… [See more...](https://snapcraft.io/search?categories=featured) [See more in Featured](https://snapcraft.io/search?categories=featured) ### More things to do… #### [Get the snap store](https://snapcraft.io/snap-store) Browse and find snaps from the convenience of your desktop using the snap store snap. #### [Learn more about snaps](https://snapcraft.io/docs) Interested to find out more about snaps? Want to publish your own application? Visit [snapcraft.io](https://snapcraft.io/) now. [Back to top](https://snapcraft.io/install/grype/arch) © 2026 Canonical Ltd. Ubuntu and Canonical are registered trademarks of Canonical Ltd. Powered by [Charmed Kubernetes](https://www.ubuntu.com/kubernetes) [Join the forum](https://forum.snapcraft.io/), contribute to or report problems with, [snapd](https://bugs.launchpad.net/snapd), [Snapcraft](https://bugs.launchpad.net/snapcraft), or [this site](https://github.com/canonical/snapcraft.io/issues/new). * [Share on Twitter](https://twitter.com/snapcraftio) * [Share on Facebook](https://www.facebook.com/snapcraftio) * [Share on YouTube](https://www.youtube.com/snapcraftio) * [Terms of Service](https://ubuntu.com/legal/terms-and-policies/snap-store-terms) * [Data privacy](https://www.ubuntu.com/legal/data-privacy) * [Manage your tracker settings](https://snapcraft.io/install/grype/arch) * [Service status](https://status.snapcraft.io/) * [Other functions](https://dashboard.snapcraft.io/) * [Contact us](https://snapcraft.io/about/contact-us)