{
  "slug": "grype-db-diff-compares-grype-v6-databases-by-package-impact-0d87062ecb4a",
  "title": "grype db diff compares Grype v6 databases by package impact",
  "tools": [
    "grype"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-04-09T13:29:25.000Z",
  "announced_at": "2026-04-09T13:29:25.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When you need to identify package matching changes between two Grype v6 databases, run `grype db diff <old_db_url_or_path> <new_db_url_or_path>`; it reports packages with added, removed, and modified vulnerability matches.",
    "examples": [
      "grype db diff <old_db_url_or_path> <new_db_url_or_path>"
    ],
    "gotchas": [
      "Version: v0.111.0",
      "old_db_url_or_path (required): First database: HTTP(S) URL, directory containing `vulnerability.db`, `.db` file path, or supported DB archive path.",
      "new_db_url_or_path (required): Second database; same supported URL or path forms as the first database.",
      "--output, -o: Output format; available formats are `text` and `json`.",
      "Prerequisite: Use Grype v0.111.0 or later with Grype v6 databases.",
      "The command compares Grype v6 databases.",
      "Docs conflict: The v0.111.0 source command syntax permits one or two positional database arguments, while the release note describes comparing two databases. The usage here follows the card's two-database task."
    ]
  },
  "why_it_matters": "Compare two Grype v6 databases to identify vulnerability data changes that affect package matching.",
  "sources": [
    "https://github.com/anchore/grype/releases/tag/v0.111.0",
    "https://github.com/anchore/grype/pull/3277",
    "https://raw.githubusercontent.com/anchore/grype/v0.111.0/cmd/grype/cli/commands/db_diff.go",
    "https://raw.githubusercontent.com/anchore/grype/v0.111.0/grype/db/v6/diff/db_resolver.go"
  ],
  "rank": 0.97026,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v2+judge-v2x3+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "wave1-20261014",
    "verdict_id": "wave1-20261014:wave1-20261014-23b34b885fe79ca6-0:gate",
    "evidence_hash": "010880a1d71289e1177729c78559d45fbc9d24d0c4cd9f3b8266c8c9d8224eec"
  },
  "review": {
    "draft_hash": "eb37bd424fa5fe6faa006b446cba8b1eb5a77a21b5030cd22bcb498232780583",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "wave1-20261014:gate",
    "reason": "3 of 3 judge runs approved with p_yes >= 0.9 (mean 0.97 >= 0.9; 2 needed) and Jev gave 0.67 (>= 0.6 needed)."
  }
}