Search results

Cannot scan otel/opentelemetry-collector-contrib images (no CPEs for all packages)

bugSomething isn't workingSomething isn't working

Status: Open.

#3179 In anchore/grype;

· mirekphd opened on Jan 23, 2026

Support for scanning CVEs in standalone .so (shared object) files

Status: Open.

#3174 In anchore/grype;

· stutiibm opened on Jan 19, 2026

VEX Documents still not working with syft sbom

bugSomething isn't workingSomething isn't working

Status: Open.

#3167 In anchore/grype;

· dariozachow opened on Jan 15, 2026

Add rootio provider for 🌱 Root CVE feed

enhancementNew feature or requestNew feature or request

Status: Open.

#3166 In anchore/grype;

· chait-slim opened on Jan 15, 2026

Github action workflow for /assign

enhancementNew feature or requestNew feature or request

needs-discussion

Status: Open.

#3164 In anchore/grype;

· wasup-yash opened on Jan 15, 2026

False Positive: CVE-2021-28170 jakarta.el, JAR file included in a customed rpm

needs-proposalShould be done but needs proposal/design for further discussionShould be done but needs proposal/design for further discussion

Status: Open.

#3163 In anchore/grype;

· etarast opened on Jan 14, 2026

Grype is filling up our pod's volume

needs-discussion

Status: Open.

#3157 In anchore/grype;

· steve-heslouin opened on Jan 12, 2026

OpenWrt generated CycloneDx SBOM not scanned properly

bugSomething isn't workingSomething isn't working

Status: Open.

#3147 In anchore/grype;

· eibach opened on Jan 7, 2026

vex document of golang subcomponents failed to be matched

bugSomething isn't workingSomething isn't working

Status: Open.

#3145 In anchore/grype;

· grooverdan opened on Jan 6, 2026

Improve JSON data shapes

enhancementNew feature or requestNew feature or request

Status: Open.

#3144 In anchore/grype;

· kzantow opened on Jan 5, 2026

·  

Grype 1.0

False positive findings in Grype Tool

bugSomething isn't workingSomething isn't working

package-overlapIssues where two packages, e.g. a pypi package and an RPM, own overlapping filesIssues where two packages, e.g. a pypi package and an RPM, own overlapping files

Status: Open.

#3142 In anchore/grype;

· ashu4 opened on Jan 2, 2026

False Positive: cve-2024-53899 RockyLinux

bugSomething isn't workingSomething isn't working

Status: Open.

#3130 In anchore/grype;

· rezmoss opened on Dec 19, 2025