Grype Scan fails: pinned grype v0.92.2 cannot load current vulnerability DB

[CarlosFelipeOR]

Problem

The Grype Scan job fails while loading the vulnerability database:

WARN error updating db error=unable to activate new vulnerability database: failed to hydrate database: ... UNIQUE constraint failed: operating_systems... (2067)
ERROR failed to load vulnerability db: database does not exist

Started failing 2026-07-15; reproduced locally.

Cause

Grype downloads the vulnerability DB from Anchore at runtime, and the job is pinned to grype v0.92.2, which cannot load the DB Anchore currently serves. Known upstream issue anchore/grype#3133: grype 0.91–0.96 fail; 0.97+ work.

Fix

Bump grype to v0.115.0 in:

• .github/workflows/grype_scan.yml
• .github/grype/run_grype_scan.sh

Validated locally: scan and result parser both run clean.

Backport PRs (external DB → all active branches need the bump)

• stable-26.3
• stable-25.8
• customizations/24.8.14
• releases/25.3.14
• antalya-25.8
• antalya-26.3
• antalya-26.6