anchore / grype

A vulnerability scanner for container images and filesystems
Apache License 2.0
8.92k stars 575 forks source link

Stabilize DB `search` output #2130

Open wagoodman opened 2 months ago

wagoodman commented 2 months ago

With DB v6 there will be substantial changes made to the DB structure. We'd like to have a way for users to have a common interface with stable output (not directly tied to the DB schema/shapes) across grype versions.

The search command should be expanded to:

Are there more use cases we should capture?

This output should be available in:

All json output should have a JSON schema describing valid/expected shapes/values.

TimBrown1611 commented 2 months ago

please notice to this kind of issue in grype db search - https://github.com/anchore/grype/issues/2085 (can be solved in the same task)

wagoodman commented 3 days ago

https://github.com/anchore/grype/pull/2288/files#diff-dcf61b30ec74dd958726ebbb9a3ff0b0b271839989f03d8f0d233de89381a727R84-R85 We have the search command partially updated to use the new curator, but does not do anything with the store results until there is something that inflates the vulnerability.Vulnerability struct from the DB models.