grype icon indicating copy to clipboard operation
grype copied to clipboard

add createdAt or updatedAt for vulnerabilities scheme

Open tomerse-sg opened this issue 1 year ago • 5 comments

What would you like to be added: vulnerabilities from NVD and GHSA contains sometimes modification and creation time. is it possible to add it into the scheme of grype?

Why is this needed: full information on CVEs \ GHSA\s Additional context:

tomerse-sg avatar Sep 18 '23 14:09 tomerse-sg

Thanks for the suggestion @tomerse-sg! I've added this to the "schema version 6 wish list" over at anchore/grype-db#108. Bumping the schema of the database grype uses is a bit of a heavy lift right now, but we're looking at ways to make it easier, and discussing what should be included in the next version (hence the "version 6 wish list").

I've you like to be part of the discussion, feel free to join the community meeting at https://github.com/anchore/grype/#join-our-community-meetings, or ping us on Slack (I think you're already in the slack).

willmurphyscode avatar Sep 18 '23 15:09 willmurphyscode

hi, from your experience, what is the approximate estimation time for the schema version 6 wish list?

tomerse-sg avatar Sep 18 '23 19:09 tomerse-sg

Hi @tomerse-sg,

Sorry, but we don't have a time estimate right now for the v6 schema wish list, or even know exactly what the final implementation will look like. If you're interested in working with us on it, please let us know!

willmurphyscode avatar Sep 18 '23 20:09 willmurphyscode

it can be useful. make the DB stateful. will it be added to the v6 db plan? @willmurphyscode

tomersein avatar Aug 15 '24 17:08 tomersein