regarding this issue - Unable to parse apk constraint phrase: failed to create comparator for '&{>= 1.0.2zk}' · Issue #2195 · anchore/grype · GitHub
I think worth thinking about a script which will monitor values before putting it inside grype-db to avoid issues of corrupted values.
what do you think?
Thanks for the feedback @TimBrown1611! I’ve added needs-discussion to some non-PEP440 version constraints for GHSA python packages in grype-db · Issue #2229 · anchore/grype · GitHub.