grype-db-management

Overview

This skill handles the maintenance and configuration of the Grype vulnerability database. It ensures that scans are performed against the latest known threat data.

When to Use

• Manual DB Updates: Ensuring the scanner has the latest data before critical scans.
• Provider Verification: Checking which data sources (NVD, RedHat, Alpine, etc.) are contributing to results.
• Air-gapped Environments: Importing/exporting databases for use without internet access.

Core Operations

Checking Database Status

Use this to see when the DB was last updated and which version is in use.

grype db status

Updating the Database

Downloads the latest vulnerability metadata.

grype db update

Listing Vulnerability Providers

Provides insight into where Grype gets its data.

grype db providers

Advanced Patterns

Searching for Specific Vulnerabilities

You can search the local database without scanning an image.

grype db search openssl

Listing Available Databases

Useful for cross-referencing schema versions.

grype db list