Skip to content

Pull requests: anchore/grype

New pull request New
67 Open 2,299 Closed
67 Open 2,299 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

chore(deps): update quality gate database automation created or acted upon by a bot
#3627 opened Aug 1, 2026 by anchore-oss-update-bot Contributor Loading…
chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4
#3623 opened Jul 31, 2026 by dependabot Bot Loading…
chore(deps): bump github/codeql-action/upload-sarif from 4.37.1 to 4.37.3
#3622 opened Jul 31, 2026 by dependabot Bot Loading…
chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 dependencies dealing with project dependencies
#3620 opened Jul 31, 2026 by dependabot Bot Loading…
chore(deps): bump github.com/ulikunitz/xz from 0.5.15 to 0.5.16 dependencies dealing with project dependencies
#3619 opened Jul 31, 2026 by dependabot Bot Loading…
chore(deps): bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1
#3618 opened Jul 31, 2026 by dependabot Bot Loading…
fix: cpan advisories could not match anything
#3616 opened Jul 31, 2026 by wagoodman Contributor • 3/3 • Draft
feat(db): transform CPANSA advisories into cpan package entries
#3615 opened Jul 31, 2026 by wagoodman Contributor • 2/3 • Draft
feat(version): add a CPAN/perl version comparator
#3614 opened Jul 31, 2026 by wagoodman Contributor • 1/3 • Draft
feat: add DHI OSV support
#3613 opened Jul 30, 2026 by aubm Loading…
1
chore(deps): update anchore dependencies automation created or acted upon by a bot changelog-ignore do not add a entry for this when generating the changelog dependencies dealing with project dependencies
#3610 opened Jul 29, 2026 by anchore-oss-update-bot Contributor • Draft
ci: let a failed SBOM step fail the release job needs-manual-review automated action that should be reviewed by a human
#3608 opened Jul 28, 2026 by kobihikri Loading…
fix(java): match explicitly declared CPEs
#3606 opened Jul 28, 2026 by Eljees Loading…
1
fix: exclude owned Go modules from OS packages
#3602 opened Jul 27, 2026 by Eljees Loading…
4
Fix Rust false positives for local Cargo packages
#3601 opened Jul 25, 2026 by 3nesdeniz Loading…
4 tasks done
7
fix(db): surface the update error when no DB exists to fall back on
#3596 opened Jul 23, 2026 by RajeshRajendiran Loading…
3 tasks done
1
Fix filtered vulnerability progress counts
#3584 opened Jul 18, 2026 by Eljees Loading…
4 tasks done
1
2
fix: normalize "u" update shorthand in pre-JEP 223 JVM versions
#3583 opened Jul 17, 2026 by Eljees Loading…
1
2
feat: show OS in db search vuln results
#3570 opened Jul 14, 2026 by kzantow Contributor • Draft
Add match details to CycloneDX vulnerabilities
#3568 opened Jul 13, 2026 by msnandhis Loading…
1
feat: add minimum severity report filtering
#3562 opened Jul 10, 2026 by krishgera Loading…
1
Do not fail a combined (OR) constraint when a sibling operand errors
#3561 opened Jul 9, 2026 by arpitjain099 Contributor Loading…
2
fix: add unaffected results to db search vuln, fix alias results
#3560 opened Jul 8, 2026 by kzantow Contributor • Draft
1
fix: use full namespaced name for db search PURLs
#3531 opened Jun 25, 2026 by arpitjain099 Contributor Loading…
1
4
feat: add Echo OSV language strategy (pip/npm/maven)
#3526 opened Jun 23, 2026 by LaizaAngrest Loading…
1
@kzantow
ProTip! Add no:assignee to see everything that’s not assigned.