Skip to content

Pull requests: anchore/grype

New pull request New
72 Open 2,335 Closed
72 Open 2,335 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

chore(deps): update anchore dependencies automation created or acted upon by a bot changelog-ignore do not add a entry for this when generating the changelog dependencies dealing with project dependencies
#3676 opened Aug 28, 2026 by anchore-oss-update-bot Contributor • Draft
feat: expose distro-fixed dropped matches via ignoredMatches, add --suppressed-sources filter
#3673 opened Aug 26, 2026 by philroche Loading…
1
Document all Grype ignore-rule fields
#3671 opened Aug 24, 2026 by dev-rehaann Loading…
2 tasks done
1
Added JUnit template for Azure DevOps
#3669 opened Aug 21, 2026 by wasup-yash Contributor Loading…
1
fix(db search): use the full namespaced package name from a PURL
#3662 opened Aug 21, 2026 by theadsingh Loading…
1
docs: point template authors at presenter models
#3658 opened Aug 18, 2026 by VedantMadane Loading…
1
fix: keep the PURL namespace when searching the db by package URL
#3654 opened Aug 15, 2026 by aron-intframe Loading…
1
fix(db): preserve http.Client timeout when applying user agent
#3646 opened Aug 9, 2026 by pujitha24 Loading…
1
1
Add MegaLinter to README as another way to run Grype
#3644 opened Aug 8, 2026 by nvuillam Loading…
fix: treat Amazon Linux's ALAS feed as comprehensive when deduplicati…
#3643 opened Aug 8, 2026 by hamodywe Loading…
1
fix(match): skip packages with an empty version like the "unknown" sentinel
#3641 opened Aug 7, 2026 by sueun-dev Loading…
fix: mark NVD records as disputed status based on cveTags
#3633 opened Aug 6, 2026 by pujitha24 Loading…
1
1
fix: don't reorder a match's fix versions while sorting
#3632 opened Aug 5, 2026 by Dashtid Contributor Loading…
fix: make --by-cve merge pick a stable record
#3631 opened Aug 5, 2026 by Dashtid Contributor Loading…
1
fix: cpan advisories could not match anything
#3616 opened Jul 31, 2026 by wagoodman Contributor • 3/3 • Draft
feat(db): transform CPANSA advisories into cpan package entries
#3615 opened Jul 31, 2026 by wagoodman Contributor • 2/3 • Draft
feat(version): add a CPAN/perl version comparator
#3614 opened Jul 31, 2026 by wagoodman Contributor • 1/3 • Draft
feat: add DHI OSV support
#3613 opened Jul 30, 2026 by aubm Loading…
@spiffcs
1
ci: let a failed SBOM step fail the release job needs-manual-review automated action that should be reviewed by a human
#3608 opened Jul 28, 2026 by kobihikri Loading…
fix(java): match explicitly declared CPEs
#3606 opened Jul 28, 2026 by Eljees Contributor Loading…
1
fix: exclude owned Go modules from OS packages
#3602 opened Jul 27, 2026 by Eljees Contributor Loading…
6
Fix Rust false positives for local Cargo packages
#3601 opened Jul 25, 2026 by 3nesdeniz Loading…
4 tasks done
9
fix(db): surface the update error when no DB exists to fall back on
#3596 opened Jul 23, 2026 by RajeshRajendiran Loading…
3 tasks done
1
Fix filtered vulnerability progress counts
#3584 opened Jul 18, 2026 by Eljees Contributor Loading…
4 tasks done
1
5
feat: show OS in db search vuln results
#3570 opened Jul 14, 2026 by kzantow Contributor • Draft
ProTip! no:milestone will show everything without a milestone.