Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Capture the dates for the last successful pull of each vunnel provider in the grype-db metadata.json file #255

Closed
westonsteimel opened this issue Mar 8, 2024 · 2 comments · Fixed by #292 or #306
Closed

Capture the dates for the last successful pull of each vunnel provider in the grype-db metadata.json file #255

westonsteimel opened this issue Mar 8, 2024 · 2 comments · Fixed by #292 or #306
Assignees
@asomya
Labels
enhancement New feature or request

Comments

@westonsteimel
Copy link
Contributor

What would you like to be added:

Capture the dates of each individual providers last successful run in the grype-db metadata.json file

Why is this needed:

So downstream consumers of the published grypedb archive can understand how up-to-date data is for each indvidual provider

Additional context:
Currently any logic that needed to determine how stale vuln data is had to rely on the build date of the grype-db being the first date that any provider failed (which changes with #251 ) or needed access to the raw metadata files of the vunnel workspaces. This will allow for anything that has access to the grypedb archive to have more fine-grained details with per-provider dates and no horrible hacks around the grypedb build date
@westonsteimel westonsteimel added the enhancement New feature or request label Mar 8, 2024
willmurphyscode pushed a commit that referenced this issue Mar 27, 2024
@dependabot
chore(deps-dev): Bump pytest-picked from 0.4.6 to 0.5.0 (#255)
e2485a4 
Bumps [pytest-picked](https://github.com/anapaulagomes/pytest-picked) from 0.4.6 to 0.5.0.
- [Release notes](https://github.com/anapaulagomes/pytest-picked/releases)
- [Changelog](https://github.com/anapaulagomes/pytest-picked/blob/dev/CHANGELOG.md)
- [Commits](anapaulagomes/pytest-picked@0.4.6...v0.5.0)

---
updated-dependencies:
- dependency-name: pytest-picked
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@westonsteimel
Copy link
Contributor Author

westonsteimel commented Apr 29, 2024 •
edited
Loading

Fixed by #292

@westonsteimel westonsteimel mentioned this issue Apr 30, 2024
Merged
@westonsteimel westonsteimel linked a pull request Apr 30, 2024 that will close this issue
feat: add last successful run for each provider to the metadata #292
Merged
@asomya asomya mentioned this issue May 7, 2024
Merged
@wagoodman
Copy link
Contributor

I'm re-opening this since the PR that implemented this was reverted

@wagoodman wagoodman reopened this May 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@asomya asomya

Labels
enhancement New feature or request
Projects
OSS
Archived in project
Milestone
No milestone
3 participants
@wagoodman @asomya @westonsteimel