fix cache for first sca scan

.github/workflows/release.yml

@@ -483,6 +483,18 @@ jobs:
         echo "amd64_sha=$amd64_sha" >> $GITHUB_OUTPUT
         echo "arm64_sha=$arm64_sha"
         echo "arm64_sha=$arm64_sha" >> $GITHUB_OUTPUT
+    
+    # Reuse cache first time if exists
+    # Otherwise fail the job entirely
+    - name: Cache Grype DB
+      id: cache-grype-1
+      uses: actions/cache@v3
+      env:
+        cache-name: cache-grype-db
+      with:
+        # Grype cache files are stored in `~/.cache/grype/db` on Linux/macOS
+        path: ~/.cache/grype/db
+        key: ${{ env.cache-name }}
 
     - name: Scan AMD64 Image digest
       id: sbom_action_amd64
@@ -491,6 +503,8 @@ jobs:
       with:
         asset_prefix: kong-${{ needs.metadata.outputs.commit-sha }}-${{ matrix.label }}-linux-amd64
         image: ${{ needs.metadata.outputs.prerelease-docker-repository }}:${{ needs.metadata.outputs.commit-sha }}-${{ matrix.label }}
+      env:
+        GRYPE_DB_AUTO_UPDATE: ${{ steps.cache-grype-1.outputs.cache-hit != 'true' && 'true' || 'false' }}
 
     - name: Cache Grype DB
       id: cache-grype