Skip to content

Comments

Add grype binary version checking#24

Merged
popey merged 1 commit intomainfrom
check-grype-version
Nov 16, 2025
Merged

Add grype binary version checking#24
popey merged 1 commit intomainfrom
check-grype-version

Conversation

@popey
Copy link
Owner

@popey popey commented Nov 16, 2025

Summary

Implements grype binary version checking on startup to notify users when a newer version of grype is available.

Changes

  • Added version checking against https://toolbox-data.anchore.io/grype/releases/latest/VERSION
  • Shows toast notification when grype update is available
  • Skips version check when running in snap (bundled grype binary)
  • Uses "grummage" as user agent when fetching version info
  • Does not attempt to update grype binary (user responsibility)

Issue Resolution

Fixes #4
Confirms #5 already working (grype vulnerability database is checked and updated on launch)

Dependencies

Note: This depends on anchore/grype#3052 being fixed upstream for the VERSION file to be kept up-to-date going forward. However, the implementation is tested and working with current grype versions.

Testing

Tested with old grype version (shows update notification) and latest version (no notification).

🤖 Generated with Claude Code

Check for grype binary updates on startup and notify users via toast
notification when a newer version is available.

- Check https://toolbox-data.anchore.io/grype/releases/latest/VERSION
- Skip version check when running in snap (bundled grype binary)
- Use "grummage" as user agent when fetching version info
- Compare semantic versions and notify if update available
- Do not attempt to update grype binary (user responsibility)

Addresses #4
Depends on anchore/grype#3052 being fixed upstream

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
@popey popey merged commit 0743525 into main Nov 16, 2025
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Prompt when grype needs updating

1 participant