Skip to content

Pull requests: anchore/grype

New pull request New
54 Open 2,257 Closed
54 Open 2,257 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

chore(deps): bump actions/setup-python from 6.2.0 to 6.3.0 in /.github/actions/bootstrap
#3554 opened Jul 3, 2026 by dependabot Bot Loading…
chore(deps): bump anchore/workflows/.github/workflows/release-install-script.yaml from 0.7.2 to 0.8.0
#3553 opened Jul 3, 2026 by dependabot Bot Loading…
chore(deps): bump anchore/workflows/.github/workflows/check-gate.yaml from 0.7.2 to 0.8.0
#3552 opened Jul 3, 2026 by dependabot Bot Loading…
Add Ubuntu ESM (Ubuntu Pro) vulnerability matching dependencies dealing with project dependencies
#3546 opened Jul 2, 2026 by wagoodman Contributor • Draft
1
feat(rhel): duplicate RHSAs to all applicable RHEL minor versions
#3542 opened Jul 1, 2026 by willmurphyscode Contributor Loading…
@willmurphyscode
10
chore(deps): update anchore dependencies automation created or acted upon by a bot changelog-ignore do not add a entry for this when generating the changelog dependencies dealing with project dependencies
#3536 opened Jun 27, 2026 by anchore-oss-update-bot Contributor • Draft
feat(RHEL): respect multiple RHSAs based on stream in version
#3533 opened Jun 25, 2026 by willmurphyscode Contributor • Draft
1
fix: use full namespaced name for db search PURLs
#3531 opened Jun 25, 2026 by arpitjain099 Loading…
1
3
feat: add Echo OSV language strategy (pip/npm/maven)
#3526 opened Jun 23, 2026 by LaizaAngrest Loading…
feat: add vulnerable version ranges to CycloneDX output
#3519 opened Jun 22, 2026 by somaz94 Loading…
1
feat: add go symbol matching qualifier for better go vuln matching dependencies dealing with project dependencies
#3509 opened Jun 17, 2026 by spiffcs Contributor • Draft
1
Add support for expiry date in ignore
#3481 opened Jun 1, 2026 by laurentb4 Loading…
4 tasks done
fix: preserve VEX justification in applied ignore rules
#3479 opened Jun 1, 2026 by toller892 Loading…
1
fix: Add CycloneDX v1.5 writing
#3477 opened Jun 1, 2026 by spiffcs Contributor Loading…
1
feat(cg/transformers): add chainguard osv transformer
#3474 opened May 29, 2026 by crosleyzack Contributor Loading…
17
Fix false positives for literal Go PURLs with subpaths
#3469 opened May 29, 2026 by immanuwell Contributor Loading…
Add OSV transformer for Ubuntu records
#3468 opened May 28, 2026 by willmurphyscode Contributor • Draft
@wagoodman @willmurphyscode
2
feat(vex): synthesize matches from SBOM for affected VEX statements
#3464 opened May 26, 2026 by xnox Contributor • Draft
5 tasks done
1
11
build db in grype instead of grype-db binny dealing with management of binary tools via binny dependencies dealing with project dependencies
#3460 opened May 22, 2026 by willmurphyscode Contributor • Draft
3
feat: scheme-aware shell completion for scan targets
#3437 opened May 10, 2026 by ChrisJr404 Loading…
1
1
feat: warn when picking up .grype.yaml from CWD
#3428 opened May 7, 2026 by ChrisJr404 Loading…
1
6
fix(matcher/golang): surface advisories pinned at import-path granularity (#3398)
#3424 opened May 6, 2026 by ChrisJr404 Loading…
6 tasks done
1
1
feat: add jsonl output format (#1159) needs-discussion
#3415 opened May 2, 2026 by ChrisJr404 Loading…
6 tasks done
1
2
feat(matcher/java): add per-request timeout for Maven SHA1 lookups (#1624)
#3414 opened May 2, 2026 by ChrisJr404 Loading…
4 tasks done
1
Add support for CycloneDX Vex
#3394 opened Apr 24, 2026 by bennetleins Loading…
4 tasks done
1
ProTip! What’s not been updated in a month: updated:<2026-06-06.