Download section of vuls db

[Dusmant0011]

DB downloaded by "vuls fetch db" is ~12G size. Is there a way to download os specific i.e. download only redhat related buckets or contents of the db

[MaineK00n]

Unfortunately, no — there is currently no way to download only a part of the DB.

vuls db fetch pulls a single pre-built OCI artifact (ghcr.io/vulsio/vuls-nightly-db:nightly) whose payload is one zstd-compressed BoltDB file, so there is no per-OS / per-bucket selection at fetch time.

What you can do instead is build your own vuls.db containing only the data sources you actually need. We provide a template repository for exactly this use case:

https://github.com/vulsio/vuls-db-template

It is a GitHub Actions template that runs vuls db init / vuls db add on a schedule and pushes the resulting DB to ghcr.io/<repository owner>/<repository name>. You only need to edit the db-build target in GNUMakefile and keep the vuls-data-extracted-* entries you want. For a Red Hat–only DB, that would be roughly:

db-build:
	vuls db init --dbtype ${DBTYPE} --dbpath ${DBPATH}
	$(MAKE) -f ${MAKEFILE} db-add REPO=vuls-data-extracted-redhat-vex-v1-rhel BRANCH=${BRANCH} DBTYPE=${DBTYPE} DBPATH=${DBPATH}
	$(MAKE) -f ${MAKEFILE} db-add REPO=vuls-data-extracted-redhat-cve BRANCH=${BRANCH} DBTYPE=${DBTYPE} DBPATH=${DBPATH}
	# keep these only if you also want CVE metadata (CVSS, CWE, references)
	$(MAKE) -f ${MAKEFILE} db-add REPO=vuls-data-extracted-nvd-feed-cve-v2 BRANCH=${BRANCH} DBTYPE=${DBTYPE} DBPATH=${DBPATH}
	$(MAKE) -f ${MAKEFILE} db-add REPO=vuls-data-extracted-mitre-cve-v5 BRANCH=${BRANCH} DBTYPE=${DBTYPE} DBPATH=${DBPATH}

Then point vuls db fetch at your own repository:

$ vuls db fetch --repository ghcr.io/<owner>/<repo>:latest

The full set of data sources used by the official nightly DB (as of 2026-08-26) is here:

https://github.com/vulsio/vuls-data-db/blob/2e198ea26762427934319abae4a48020f5182764/db-main.mk#L9-L47

That db-main.mk is the recipe the nightly build actually uses, so it is the most up-to-date reference for both the available vuls-data-extracted-* repositories and the exact db-add invocation (note that the template's GNUMakefile is a slightly simplified sample). The dropped sources are what make up most of the ~12 GB, so a Red Hat–only DB ends up far smaller.