From d3ef27c2bca708cb61751877161b6d96453fe7d9 Mon Sep 17 00:00:00 2001
From: Kovid Goyal <kovid@kovidgoyal.net>
Date: Fri, 17 Oct 2025 10:59:11 +0530
Subject: [PATCH] Update grype db as part of install

---
 .github/workflows/ci.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.py b/.github/workflows/ci.py
index eff5c54bb..aff64b602 100644
--- a/.github/workflows/ci.py
+++ b/.github/workflows/ci.py
@@ -211,7 +211,9 @@ def install_grype() -> str:
     data = download_with_retry(url)
     with tarfile.open(fileobj=io.BytesIO(data), mode='r') as tf:
         tf.extract('grype', path=dest, filter='fully_trusted')
-    return os.path.join(dest, 'grype')
+    exe = os.path.join(dest, 'grype')
+    subprocess.check_call([exe, 'db', 'update'])
+    return exe
 
 
 IGNORED_DEPENDENCY_CVES = [