Yesterday GitHub was having issues where https://raw.githubusercontent.com/* requests were returning 429s, which threw a large wrench in CI runs and users trying to install our tools during that time. It did not appear that there was an affect on being able to download release assets themselves, which was good news. We decided to take the additional measure of migrating our advertised installation URLs from these (very long) github content URLs to the anchore.io domain:
curl -sSfL https://get.anchore.io/syft | sudo sh -s -- -b /usr/local/bin
We’re still serving up the same install.sh script, but instead of referencing the raw github content, it is sitting in an R2 bucket. This has been done in the syft, grype, grant, chronicle, and binny repos (grype-db will also be ported over soon as well).
We’ve additionally added sudo to the suggested install step, which was in response to user requests to update docs in the past, and since we were already updating the suggested commands everywhere it made sense to make the change now.