# No Vulnerability DB Updates

**URL:** <https://anchorecommunity.discourse.group/t/no-vulnerability-db-updates/497>\
**Category:** Grype\
**Created:** [July 15, 2025, 12:01pm UTC](https://anchorecommunity.discourse.group/t/no-vulnerability-db-updates/497 "2025-07-15T12:01:08Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![henrysachs](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/henrysachs/32/63_2.png) [@henrysachs](https://anchorecommunity.discourse.group/u/henrysachs)\
**Post date:** [July 15, 2025, 12:01pm UTC](https://anchorecommunity.discourse.group/t/no-vulnerability-db-updates/497/1 "2025-07-15T12:01:08Z")

</div>

Hey there,

it seems grype doesn’t have a new DB listed on: [https://grype.anchore.io/databases/v6/latest.json](https://grype.anchore.io/databases/v6/latest.json)  
is everything alright with the pipeline as normally you built a new db every day

---

<div class="post-metadata">

**Author:** ![wagoodman](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/wagoodman/32/13_2.png) [@wagoodman](https://anchorecommunity.discourse.group/u/wagoodman)\
**Post date:** [July 15, 2025, 1:25pm UTC](https://anchorecommunity.discourse.group/t/no-vulnerability-db-updates/497/2 "2025-07-15T13:25:38Z")

</div>

Over the weekend the v5 DB builds started to use too much memory and were being killed. This prevented both the v5 and v6 DBs from being published. In the past (before v6) this was a blocker since the listing file was a shared concern, however, with v6 this is no longer a concern.

We have a fix to unblock the v5 builds that was just released in grype; I’ll be republishing the DBs after they are incorporated into grype-db (expect a new DB within a couple hours). We’ll also followup fix once DBs are publishing again to decouple these pipelines further so v5 can’t block v6 from publishing.

---

<div class="post-metadata">

**Author:** ![wagoodman](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/wagoodman/32/13_2.png) [@wagoodman](https://anchorecommunity.discourse.group/u/wagoodman)\
**Post date:** [July 15, 2025, 3:15pm UTC](https://anchorecommunity.discourse.group/t/no-vulnerability-db-updates/497/3 "2025-07-15T15:15:30Z")

</div>

@henrysachs you should see newly published DBs 🎉

---

<div class="post-metadata">

**Author:** ![henrysachs](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/henrysachs/32/63_2.png) [@henrysachs](https://anchorecommunity.discourse.group/u/henrysachs)\
**Post date:** [July 15, 2025, 3:30pm UTC](https://anchorecommunity.discourse.group/t/no-vulnerability-db-updates/497/4 "2025-07-15T15:30:24Z")

</div>

Yeah i just received an update. Thanks a lot!  
But just for my understanding you wrote that v6 doesnt have this issue but they are still coupled because later in the text you state that you do a follow up fix am i right?

---

<div class="post-metadata">

**Author:** ![floric](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/floric/32/428_2.png) [@floric](https://anchorecommunity.discourse.group/u/floric)\
**Post date:** [December 1, 2025, 8:08am UTC](https://anchorecommunity.discourse.group/t/no-vulnerability-db-updates/497/5 "2025-12-01T08:08:10Z")

</div>

Hey 🙂 it appears as if the database is outdated again: 6.1.3\_2025-11-27T00:25:44Z\_1764228132

Is there any chance to trigger it again?

Kind regards, Florian

---

<div class="post-metadata">

**Author:** ![willmurphy](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/willmurphy/32/12_2.png) [@willmurphy](https://anchorecommunity.discourse.group/u/willmurphy)\
**Post date:** [December 1, 2025, 4:48pm UTC](https://anchorecommunity.discourse.group/t/no-vulnerability-db-updates/497/6 "2025-12-01T16:48:05Z")

</div>

hi @floric thanks for the ping! We are working on this now.

---

<div class="post-metadata">

**Author:** ![willmurphy](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/willmurphy/32/12_2.png) [@willmurphy](https://anchorecommunity.discourse.group/u/willmurphy)\
**Post date:** [December 1, 2025, 5:44pm UTC](https://anchorecommunity.discourse.group/t/no-vulnerability-db-updates/497/7 "2025-12-01T17:44:40Z")

</div>

Hey @floric just wanted to let you know that the new database is published:

```sh
$ grype db update
$ grype db status | grep ^Built
Built: 2025-12-01T16:28:25Z

```

---

<div class="post-metadata">

**Author:** ![floric](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/floric/32/428_2.png) [@floric](https://anchorecommunity.discourse.group/u/floric)\
**Post date:** [December 4, 2025, 9:33am UTC](https://anchorecommunity.discourse.group/t/no-vulnerability-db-updates/497/8 "2025-12-04T09:33:42Z")

</div>

thanks a lot 🙂

Unfortunately it seems to have failed today again:

> <https://github.com/anchore/grype-db/actions/runs/19921858549>

---

<div class="post-metadata">

**Author:** ![willmurphy](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/willmurphy/32/12_2.png) [@willmurphy](https://anchorecommunity.discourse.group/u/willmurphy)\
**Post date:** [December 4, 2025, 9:38am UTC](https://anchorecommunity.discourse.group/t/no-vulnerability-db-updates/497/9 "2025-12-04T09:38:37Z")

</div>

Hi @floric are you on a recent version of grype?

```auto
❯ grype db update
...
Vulnerability database updated to latest version!

❯ grype db status | grep ^Built
Built: 2025-12-04T08:18:20Z

```

That job failed at the last step, publishing the listing file, but the listing file is only used to distribute the v5 schema of the grype database, which is only relevant to very old grype versions at this point.

Does `grype db update` succeed for you?

---

<div class="post-metadata">

**Author:** ![floric](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/floric/32/428_2.png) [@floric](https://anchorecommunity.discourse.group/u/floric)\
**Post date:** [December 4, 2025, 9:39am UTC](https://anchorecommunity.discourse.group/t/no-vulnerability-db-updates/497/10 "2025-12-04T09:39:44Z")

</div>

you are absolutely right. I just checked and the db is updated.

I was just waiting for this update for a CVE and had a look on the job.

Please excuse my confusion and thanks for your fast response.

---

<div class="post-metadata">

**Author:** ![willmurphy](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/willmurphy/32/12_2.png) [@willmurphy](https://anchorecommunity.discourse.group/u/willmurphy)\
**Post date:** [December 4, 2025, 9:40am UTC](https://anchorecommunity.discourse.group/t/no-vulnerability-db-updates/497/11 "2025-12-04T09:40:56Z")

</div>

No problem! We will definitely take a look at why pushing the listing file failed, but people using recent versions of grype are luckily not affected. Thanks!
