Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Avoid Grype DB downloads during subsequent invocations of grype scan-action #115

Merged
merged 3 commits into from
Apr 24, 2024
Merged

Avoid Grype DB downloads during subsequent invocations of grype scan-action #115

merged 3 commits into from
Apr 24, 2024

Conversation

saisatishkarra
Copy link
Collaborator

@saisatishkarra saisatishkarra commented Apr 23, 2024 •
edited
Loading

Summary

  • Grype action caches the db on its first invocation at cache-dir: "$XDG_CACHE_HOME/grype/db" as per config file
  • Optimize build time by avoiding grype db downloads during multiple subsequent runs of anchore/scan-action for CVE analysis.

Out of Scope

  • This improvement WILL NOT FIX the read timeout issue during the first invocation of the action

@saisatishkarra saisatishkarra requested review from a team as code owners April 23, 2024 21:37
@github-actions GitHub Actions
Copy link

github-actions bot commented Apr 23, 2024 •
edited
Loading

Luacheck Report

1 files  ±0  1 suites  ±0   0s ⏱️ ±0s
4 tests ±0  4 ✅ ±0  0 💤 ±0  0 ❌ ±0 
8 runs  ±0  8 ✅ ±0  0 💤 ±0  0 ❌ ±0 

Results for commit 9004d19. ± Comparison against base commit 23929cf.

♻️ This comment has been updated with latest results.

cjbischoffkg
cjbischoffkg previously approved these changes Apr 23, 2024
View reviewed changes
@saisatishkarra saisatishkarra changed the title Avoid Grype DB downloads during subsequent grype invocations Avoid Grype DB downloads during subsequent invocations of grype scan-action Apr 23, 2024
@saisatishkarra saisatishkarra merged commit 949f2dd into main Apr 24, 2024
11 checks passed
@saisatishkarra saisatishkarra deleted the ci/grype-db-cache branch April 24, 2024 01:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@cjbischoffkg cjbischoffkg cjbischoffkg approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@saisatishkarra @cjbischoffkg