Update grype db as part of install

This commit is contained in:
Kovid Goyal 2025-10-17 10:59:11 +05:30
parent 8ff59050da
commit d3ef27c2bc
No known key found for this signature in database
GPG key ID: 06BC317B515ACE7C

View file

@ -211,7 +211,9 @@ def install_grype() -> str:
data = download_with_retry(url)
with tarfile.open(fileobj=io.BytesIO(data), mode='r') as tf:
tf.extract('grype', path=dest, filter='fully_trusted')
return os.path.join(dest, 'grype')
exe = os.path.join(dest, 'grype')
subprocess.check_call([exe, 'db', 'update'])
return exe
IGNORED_DEPENDENCY_CVES = [