Skip to content

Pull requests: anchore/grype

New pull request New
71 Open 2,312 Closed
71 Open 2,312 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

chore(deps): update anchore dependencies automation created or acted upon by a bot changelog-ignore do not add a entry for this when generating the changelog dependencies dealing with project dependencies
#3648 opened Aug 11, 2026 by anchore-oss-update-bot Contributor • Draft
fix(db): preserve http.Client timeout when applying user agent
#3646 opened Aug 9, 2026 by pujitha24 Loading…
1
Add MegaLinter to README as another way to run Grype
#3644 opened Aug 8, 2026 by nvuillam Loading…
fix: treat Amazon Linux's ALAS feed as comprehensive when deduplicati…
#3643 opened Aug 8, 2026 by hamodywe Loading…
1
fix(match): skip packages with an empty version like the "unknown" sentinel
#3641 opened Aug 7, 2026 by sueun-dev Loading…
chore(deps): bump github.com/gocsaf/csaf/v3 from 3.5.1 to 3.6.0 dependencies dealing with project dependencies
#3638 opened Aug 7, 2026 by dependabot Bot Loading…
feat(apk/matcher): apk matcher does alias aware aggregation
#3634 opened Aug 6, 2026 by crosleyzack Contributor • Draft
4
fix: mark NVD records as disputed status based on cveTags
#3633 opened Aug 6, 2026 by pujitha24 Loading…
1
fix: don't reorder a match's fix versions while sorting
#3632 opened Aug 5, 2026 by Dashtid Contributor Loading…
fix: make --by-cve merge pick a stable record
#3631 opened Aug 5, 2026 by Dashtid Contributor Loading…
1
chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4
#3623 opened Jul 31, 2026 by dependabot Bot Loading…
chore(deps): bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1
#3618 opened Jul 31, 2026 by dependabot Bot Loading…
fix: cpan advisories could not match anything
#3616 opened Jul 31, 2026 by wagoodman Contributor • 3/3 • Draft
feat(db): transform CPANSA advisories into cpan package entries
#3615 opened Jul 31, 2026 by wagoodman Contributor • 2/3 • Draft
feat(version): add a CPAN/perl version comparator
#3614 opened Jul 31, 2026 by wagoodman Contributor • 1/3 • Draft
feat: add DHI OSV support
#3613 opened Jul 30, 2026 by aubm Loading…
@spiffcs
1
ci: let a failed SBOM step fail the release job needs-manual-review automated action that should be reviewed by a human
#3608 opened Jul 28, 2026 by kobihikri Loading…
fix(java): match explicitly declared CPEs
#3606 opened Jul 28, 2026 by Eljees Loading…
1
fix: exclude owned Go modules from OS packages
#3602 opened Jul 27, 2026 by Eljees Loading…
5
Fix Rust false positives for local Cargo packages
#3601 opened Jul 25, 2026 by 3nesdeniz Loading…
4 tasks done
9
fix(db): surface the update error when no DB exists to fall back on
#3596 opened Jul 23, 2026 by RajeshRajendiran Loading…
3 tasks done
1
Fix filtered vulnerability progress counts
#3584 opened Jul 18, 2026 by Eljees Loading…
4 tasks done
1
3
fix: normalize "u" update shorthand in pre-JEP 223 JVM versions
#3583 opened Jul 17, 2026 by Eljees Loading…
1
3
feat: show OS in db search vuln results
#3570 opened Jul 14, 2026 by kzantow Contributor • Draft
Add match details to CycloneDX vulnerabilities
#3568 opened Jul 13, 2026 by msnandhis Loading…
1
ProTip! Type g p on any issue or pull request to go back to the pull request listing page.