Skip to content

Pull requests: anchore/grype

New pull request New
76 Open 2,305 Closed
76 Open 2,305 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

fix(db): preserve http.Client timeout when applying user agent
#3646 opened Aug 9, 2026 by pujitha24 Loading…
1
Add MegaLinter to README as another way to run Grype
#3644 opened Aug 8, 2026 by nvuillam Loading…
fix: treat Amazon Linux's ALAS feed as comprehensive when deduplicati…
#3643 opened Aug 8, 2026 by hamodywe Loading…
1
fix(match): skip packages with an empty version like the "unknown" sentinel
#3641 opened Aug 7, 2026 by sueun-dev Loading…
chore(deps): bump github.com/gocsaf/csaf/v3 from 3.5.1 to 3.6.0 dependencies dealing with project dependencies
#3638 opened Aug 7, 2026 by dependabot Bot Loading…
chore(deps): update tool versions automation created or acted upon by a bot binny dealing with management of binary tools via binny changelog-ignore do not add a entry for this when generating the changelog dependencies dealing with project dependencies needs-manual-review automated action that should be reviewed by a human
#3636 opened Aug 7, 2026 by anchore-oss-update-bot Contributor Loading…
feat(apk/matcher): apk matcher does alias aware aggregation
#3634 opened Aug 6, 2026 by crosleyzack Contributor • Draft
1
fix: mark NVD records as disputed status based on cveTags
#3633 opened Aug 6, 2026 by pujitha24 Loading…
1
fix: don't reorder a match's fix versions while sorting
#3632 opened Aug 5, 2026 by Dashtid Contributor Loading…
fix: make --by-cve merge pick a stable record
#3631 opened Aug 5, 2026 by Dashtid Contributor Loading…
1
chore(deps): update quality gate database automation created or acted upon by a bot
#3627 opened Aug 1, 2026 by anchore-oss-update-bot Contributor Loading…
chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4
#3623 opened Jul 31, 2026 by dependabot Bot Loading…
chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 dependencies dealing with project dependencies
#3620 opened Jul 31, 2026 by dependabot Bot Loading…
chore(deps): bump github.com/ulikunitz/xz from 0.5.15 to 0.5.16 dependencies dealing with project dependencies
#3619 opened Jul 31, 2026 by dependabot Bot Loading…
chore(deps): bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1
#3618 opened Jul 31, 2026 by dependabot Bot Loading…
fix: cpan advisories could not match anything
#3616 opened Jul 31, 2026 by wagoodman Contributor • 3/3 • Draft
feat(db): transform CPANSA advisories into cpan package entries
#3615 opened Jul 31, 2026 by wagoodman Contributor • 2/3 • Draft
feat(version): add a CPAN/perl version comparator
#3614 opened Jul 31, 2026 by wagoodman Contributor • 1/3 • Draft
feat: add DHI OSV support
#3613 opened Jul 30, 2026 by aubm Loading…
1
chore(deps): update anchore dependencies automation created or acted upon by a bot changelog-ignore do not add a entry for this when generating the changelog dependencies dealing with project dependencies
#3610 opened Jul 29, 2026 by anchore-oss-update-bot Contributor • Draft
ci: let a failed SBOM step fail the release job needs-manual-review automated action that should be reviewed by a human
#3608 opened Jul 28, 2026 by kobihikri Loading…
fix(java): match explicitly declared CPEs
#3606 opened Jul 28, 2026 by Eljees Loading…
1
fix: exclude owned Go modules from OS packages
#3602 opened Jul 27, 2026 by Eljees Loading…
5
Fix Rust false positives for local Cargo packages
#3601 opened Jul 25, 2026 by 3nesdeniz Loading…
4 tasks done
7
fix(db): surface the update error when no DB exists to fall back on
#3596 opened Jul 23, 2026 by RajeshRajendiran Loading…
3 tasks done
1
ProTip! Add no:assignee to see everything that’s not assigned.