grype icon indicating copy to clipboard operation
grype copied to clipboard

Grype failed to load vulnerability database: database metadata not found

Open Atharex opened this issue 9 months ago • 3 comments

What happened: Running Grype on an Azure DevOps Pipeline task occasionally fails with the following error:

[info] checking github for the current release tag 
[info] fetching release script for tag='v0.77.4' 
[info] checking github for the current release tag 
[info] using release tag='v0.77.4' version='0.77.4' os='linux' arch='amd64' 
[info] installed /usr/local/bin/grype 
failed to load vulnerability db: vulnerability database is invalid (run db update to correct): database metadata not found: /home/vsts/.cache/grype/db/5

##[error]Bash exited with code '1'.

Rerunning the pipeline several times eventually brings it to completion, yet this transient error prevents us from relying on grype scanning automation.

What you expected to happen: The pipeline to run consistently successfully

How to reproduce it (as minimally and precisely as possible): Run an Azure DevOps pipeline task where Grype is used (my current version is v0.77.4)

Environment:

  • Output of grype version: v.0.77.4
  • OS (e.g: cat /etc/os-release or similar): Linux, amd64

Atharex avatar May 24 '24 08:05 Atharex