curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin
curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin
syft [my application path] -o json  --exclude ./uploads/* --exclude ./sites/* | grype

[info] fetching release script for tag='v0.42.1' 
[info] using release tag='v0.42.1' version='0.42.1' os='linux' arch='amd64' 
[info] installed /usr/local/bin/syft 
[info] checking github for the current release tag 
[info] fetching release script for tag='v0.34.4' 
[info] checking github for the current release tag 
[info] using release tag='v0.34.4' version='0.34.4' os='linux' arch='amd64' 
[info] installed /usr/local/bin/grype 
 ✔ Indexed [my application path]
 ✔ Cataloged packages      [144 packages]
[0003]  WARN Unable to determine the OS distribution. This may result in missing vulnerabilities. You may specify a distro using: --distro <distro>:<version>

Application:          grype
Version:              0.34.4
Syft Version:         v0.42.1
BuildDate:            2022-03-21T20:41:53Z
GitCommit:            f004f7dee3f64664de1da6d81d57129bf30101b4
GitDescription:       v0.34.4
Platform:             linux/amd64
GoVersion:            go1.18
Compiler:             gc
Supported DB Schema:  3

NAME="Ubuntu"
VERSION="20.04.4 LTS (Focal Fossa)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 20.04.4 LTS"
VERSION_ID="20.04"
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=focal
UBUNTU_CODENAME=focal