Skip to content

Pull requests: anchore/grype

New pull request New
55 Open 2,265 Closed
55 Open 2,265 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Add match details to CycloneDX vulnerabilities
#3568 opened Jul 13, 2026 by msnandhis Loading…
1
fix(version): do not cache a comparator that failed to build
#3567 opened Jul 11, 2026 by arpitjain099 Loading…
feat: add minimum severity report filtering
#3562 opened Jul 10, 2026 by krishgera Loading…
1
Do not fail a combined (OR) constraint when a sibling operand errors
#3561 opened Jul 9, 2026 by arpitjain099 Loading…
2
fix: add unaffected results to db search vuln, fix alias results
#3560 opened Jul 8, 2026 by kzantow Contributor • Draft
1
chore(deps): bump actions/setup-python from 6.2.0 to 6.3.0 in /.github/actions/bootstrap
#3554 opened Jul 3, 2026 by dependabot Bot Loading…
Add Ubuntu ESM vulnerability matching dependencies dealing with project dependencies
#3546 opened Jul 2, 2026 by wagoodman Contributor Loading…
1
1
chore(deps): update anchore dependencies automation created or acted upon by a bot changelog-ignore do not add a entry for this when generating the changelog dependencies dealing with project dependencies
#3536 opened Jun 27, 2026 by anchore-oss-update-bot Contributor • Draft
feat(RHEL): respect multiple RHSAs based on stream in version
#3533 opened Jun 25, 2026 by willmurphyscode Contributor • Draft
1
fix: use full namespaced name for db search PURLs
#3531 opened Jun 25, 2026 by arpitjain099 Loading…
1
3
feat: add Echo OSV language strategy (pip/npm/maven)
#3526 opened Jun 23, 2026 by LaizaAngrest Loading…
feat: add vulnerable version ranges to CycloneDX output
#3519 opened Jun 22, 2026 by somaz94 Loading…
1
feat: add go symbol matching qualifier for better go vuln matching dependencies dealing with project dependencies
#3509 opened Jun 17, 2026 by spiffcs Contributor Loading…
2
9
Add support for expiry date in ignore
#3481 opened Jun 1, 2026 by laurentb4 Loading…
4 tasks done
fix: preserve VEX justification in applied ignore rules
#3479 opened Jun 1, 2026 by toller892 Loading…
1
fix: Add CycloneDX v1.5 writing
#3477 opened Jun 1, 2026 by spiffcs Contributor Loading…
1
Fix false positives for literal Go PURLs with subpaths
#3469 opened May 29, 2026 by immanuwell Contributor Loading…
Add OSV transformer for Ubuntu records
#3468 opened May 28, 2026 by willmurphyscode Contributor • Draft
@wagoodman @willmurphyscode
2
feat(vex): synthesize matches from SBOM for affected VEX statements
#3464 opened May 26, 2026 by xnox Contributor • Draft
5 tasks done
1
11
build db in grype instead of grype-db binny dealing with management of binary tools via binny dependencies dealing with project dependencies
#3460 opened May 22, 2026 by willmurphyscode Contributor • Draft
3
feat: scheme-aware shell completion for scan targets
#3437 opened May 10, 2026 by ChrisJr404 Loading…
1
1
feat: warn when picking up .grype.yaml from CWD
#3428 opened May 7, 2026 by ChrisJr404 Loading…
1
6
fix(matcher/golang): surface advisories pinned at import-path granularity (#3398)
#3424 opened May 6, 2026 by ChrisJr404 Loading…
6 tasks done
1
1
feat: add jsonl output format (#1159) needs-discussion
#3415 opened May 2, 2026 by ChrisJr404 Loading…
6 tasks done
1
2
feat(matcher/java): add per-request timeout for Maven SHA1 lookups (#1624)
#3414 opened May 2, 2026 by ChrisJr404 Loading…
4 tasks done
1
ProTip! Follow long discussions with comments:>50.