Feature: VDB update frequency information

[johennin]

Request Description

Hello! I'm just curious about how often the vulnerability database updates, I've looked through the help CLI command, OWASP page, git page and even the source code but can't seem to find any information regarding the update frequency of the VDB or how often it updates.

My initial guess is that the database is updated dynamically every time a new vulnerability is released but that's only a guess.

This is also a suggestion/request to add the database update frequency somewhere because many other SBOM scanners such as Trivy and Grype mentions it for transparency and reliability reasons.

(If it stands somewhere and I missed it I apologize in advance)

Thank you!

Additional Information

No response

[prabhu]

@johennin, the update frequency is 6 hours as mentioned here.

https://github.com/AppThreat/vdb/blob/main/.github/workflows/build.yml#L5

Please feel free to fork the vdb repo to customize the update frequency. You can pass the custom download URL using the environment variables here or simply download the file to the VDB_HOME directory before invoking depscan.

[johennin]

Alright, thank you for the quick and precise response!