No Vulnerability DB Updates

Hey there,

it seems grype doesn’t have a new DB listed on: https://grype.anchore.io/databases/v6/latest.json
is everything alright with the pipeline as normally you built a new db every day

Over the weekend the v5 DB builds started to use too much memory and were being killed. This prevented both the v5 and v6 DBs from being published. In the past (before v6) this was a blocker since the listing file was a shared concern, however, with v6 this is no longer a concern.

We have a fix to unblock the v5 builds that was just released in grype; I’ll be republishing the DBs after they are incorporated into grype-db (expect a new DB within a couple hours). We’ll also followup fix once DBs are publishing again to decouple these pipelines further so v5 can’t block v6 from publishing.

@henrysachs you should see newly published DBs :tada:

1 Like

Yeah i just received an update. Thanks a lot!
But just for my understanding you wrote that v6 doesnt have this issue but they are still coupled because later in the text you state that you do a follow up fix am i right?