Skip to content

Conversation

spiffcs
Copy link
Contributor

@spiffcs spiffcs commented Apr 25, 2025

Update Scan Action to use Grype DB v6

Features

  • Change the grype pinned version from v0.87.0 ==> v0.91.0
  • Update testing scripts to use newer grype db import commands to manage and import db from url
  • add ease of use registry and image scripts for local testing
  • remove db server mocks from v5 and cache testing against mocks

Note on removing mock db: it's grype's job to test that it can use GRYPE_CACHE_DB correctly - Scan Action should not mock and double check this

spiffcs added 6 commits April 1, 2025 14:54
Signed-off-by: Christopher Phillips <[email protected]>
Signed-off-by: Christopher Phillips <[email protected]>
Signed-off-by: Christopher Phillips <[email protected]>
@spiffcs spiffcs self-assigned this Apr 29, 2025
@spiffcs spiffcs linked an issue Apr 29, 2025 that may be closed by this pull request
Signed-off-by: Christopher Phillips <[email protected]>
Copy link
Contributor

@kzantow kzantow left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

set -euo pipefail

# Remove existing container named 'registry' if it exists
if docker ps -a --format '{{.Names}}' | grep -Eq '^registry$'; then
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One other option is just uploading these prebuilt images to GHCR and getting rid of the build step altogether. It would make everyone's lives easier, probably.

@spiffcs spiffcs changed the title Scan action v6 feat: update Scan action to use grype db v6 Apr 29, 2025
@spiffcs spiffcs merged commit 2c901ab into main Apr 29, 2025
31 checks passed
@spiffcs spiffcs deleted the scan-action-v6 branch April 29, 2025 17:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

grype version is still pinned to v0.87.0 in GrypeVersion.js
3 participants