Tracing elements of grype json output

Grype
1

Howdy,

I have a couple of questions regarding grype vuln scan output:

  • How can I trace which provider the matches.vulnerability.description field comes from?
  • Can I set nvd as the first option for the matches.vulnerability.description field?

Also, what provider precedence does grype-db/vunnel when creating the nightly db?

Thank you,

Drew