OS Manuals

/usr/bin/grype-db

Application to create a Grype vulnerability database from upstream vulnerability data sources.

From grype-db 0.54.7-r2 (enterprise-packages), captured 2026-11-09 by running grype-db --help (exit 0). permalink

pull all vulnerability data, build the database, and package it for distribution

Usage:
grype-db [flags]
grype-db [command]

Application Config:
 (search locations: .grype-db.yaml, grype-db.yaml, .grype-db/config.yaml, ~/.grype-db.yaml, ~/grype-db.yaml, $XDG_CONFIG_HOME/grype-db/config.yaml)
  log:
    # suppress logging output (env var: "GRYPE_DB_LOG_QUIET")
    quiet: false

    # error, warn, info, debug, trace (env var: "GRYPE_DB_LOG_LEVEL")
    level: "info"

    # file to write all loge entries to (env var: "GRYPE_DB_LOG_FILE")
    file: ""

Available Commands:
build          build a SQLite DB from the vulnerability feeds data for a particular schema version
cache          manage the local pull cache
completion     Generate the autocompletion script for the specified shell
help           Help about any command
list-providers list all configured providers
package        package the already built database file into an archive ready for upload and serving
pull           pull and process all upstream vulnerability data
version        show grype-db version information

Flags:
  -e, --archive-extension string         Override the extension used during DB archiving (default is 'tar.gz' or 'tar.zst' based on the grype DB schema)
      --batch-size int                   number of database operations to batch before flushing to disk (balances throughput with memory usage) (default 2000)
  -c, --config string                    path to the application config
  -d, --dir string                       directory where the database is written (default "./build")
      --dry-run                          parse the application config, CLI flags, and exit.
  -g, --generate-providers-from-vunnel   Generate provider configs from 'vunnel list' output
  -h, --help                             help for grype-db
      --parallelism int                  number of vulnerability providers to update concurrently (default 4)
  -p, --provider-name stringArray        one or more provider names to filter building a DB for (default: empty = all)
  -u, --publish-base-url string          the base URL used for reference in the listing.json index file (default "https://localhost:8080/grype/databases")
  -q, --quiet                            suppress all logging output
  -s, --schema int                       DB Schema version to build for (default 6)
      --skip-validation                  skip validation of the provider state
  -v, --verbose count                    increase verbosity (-v = debug, -vv = trace)
      --version                          version for grype-db

Use "grype-db [command] --help" for more information about a command.
Options (15)
OptionDescriptionSource
-e, --archive-extension stringOverride the extension used during DB archiving (default is 'tar.gz' or 'tar.zst' based on the grype DB schema)help
--batch-size intnumber of database operations to batch before flushing to disk (balances throughput with memory usage) (default 2000)help
-c, --config stringpath to the application confighelp
-d, --dir stringdirectory where the database is written (default "./build")help
--dry-runparse the application config, CLI flags, and exit.help
-g, --generate-providers-from-vunnelGenerate provider configs from 'vunnel list' outputhelp
-h, --helphelp for grype-dbhelp
--parallelism intnumber of vulnerability providers to update concurrently (default 4)help
-p, --provider-name stringArrayone or more provider names to filter building a DB for (default: empty = all)help
-u, --publish-base-url stringthe base URL used for reference in the listing.json index file (default "https://localhost:8080/grype/databases")help
-q, --quietsuppress all logging outputhelp
-s, --schema intDB Schema version to build for (default 6)help
--skip-validationskip validation of the provider statehelp
-v, --verbose countincrease verbosity (-v = debug, -vv = trace)help
--versionversion for grype-dbhelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.