-
Notifications
You must be signed in to change notification settings - Fork 546
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Convenient support for db downloads from artifactory. #2004
Comments
Hi @sfc-gh-mhazy, thanks for the request! We plan to make the paths relative as part of the schema v6 work. |
@willmurphyscode Thank you, this is great news. Just to clarify, with such relative paths, will it be sufficient to set appropriate |
Yes! This is exactly the idea of having relative paths to the databases, so you simply mirror the listing.json and the databases, and a proxy should just work as expected. |
What would you like to be added:
Hi,
Thank you for developing the grype tool, it's really great.
I wanted to ask about some feature to support convenient downloads through artifactory proxies, for example JFrog.
I am happy to implement it once the proposal is accepted.
Constraints
Current possible solution
GRYPE_DB_UPDATE_URL
to download metadata from the proxy.Desired solution
grype db update
call would be sufficient.Proposals
grype db update
that would replace the prefix of the url from listing.json. For example:--rewrite=https://toolbox-data.anchore.io/grype/databases=https://my_proxy.com
would rewritehttps://toolbox-data.anchore.io/grype/databases/vulnerability-db_v5_2024-07-24T01:31:07Z_1721794870.tar.gz
tohttps://my_proxy.com/vulnerability-db_v5_2024-07-24T01:31:07Z_1721794870.tar.gz
grype db update
callgrype db updateto
orgrype db update --version=vulnerability-db_v5_2024-07-24T01:31:07Z_1721794870.tar.gz
Why is this needed:
This is mostly for convenience.
Additional context:
The text was updated successfully, but these errors were encountered: