Hey folks, I just posted a blog post on Grype’s open source upstream tools, vunnel and grype-db.
Deep Dive : Where Does Grype Data Come From?
I’ll be updating the grype-db README with some of the information on needed API keys and configs for the pip/local versus image approaches.
Hoping blog posts like this will make it easier to contribute to Grype, so I’d appreciate feedback and sharing. If you post, let me know and I (and/or Chainguard) will boost. Thanks for making Grype’s data pipeline open source, grype-db and vunnel are great projects.