Skip to content

Pull requests: anchore/grype

New pull request New
48 Open 2,241 Closed
48 Open 2,241 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

feat: add Echo OSV language strategy (pip/npm/maven)
#3526 opened Jun 23, 2026 by LaizaAngrest Loading…
feat: add vulnerable version ranges to CycloneDX output
#3519 opened Jun 22, 2026 by somaz94 Loading…
1
feat: add go symbol matching qualifier for better go vuln matching dependencies dealing with project dependencies
#3509 opened Jun 17, 2026 by spiffcs Contributor • Draft
feat: populate package architecture for matching
#3504 opened Jun 12, 2026 by willmurphyscode Contributor • Draft
@willmurphyscode
7
chore(deps): update anchore dependencies automation created or acted upon by a bot dependencies dealing with project dependencies
#3498 opened Jun 6, 2026 by anchore-oss-update-bot Contributor • Draft
Add support for expiry date in ignore
#3481 opened Jun 1, 2026 by laurentb4 Loading…
4 tasks done
fix: preserve VEX justification in applied ignore rules
#3479 opened Jun 1, 2026 by toller892 Loading…
1
fix: Add CycloneDX v1.5 writing
#3477 opened Jun 1, 2026 by spiffcs Contributor Loading…
1
feat(cg/transformers): add chainguard osv transformer
#3474 opened May 29, 2026 by crosleyzack Contributor Loading…
11
Fix false positives for literal Go PURLs with subpaths
#3469 opened May 29, 2026 by immanuwell Contributor Loading…
Add OSV transformer for Ubuntu records
#3468 opened May 28, 2026 by willmurphyscode Contributor Loading…
@wagoodman @willmurphyscode
1
feat(vex): synthesize matches from SBOM for affected VEX statements
#3464 opened May 26, 2026 by xnox Contributor Loading…
5 tasks done
1
10
build db in grype instead of grype-db binny dealing with management of binary tools via binny dependencies dealing with project dependencies
#3460 opened May 22, 2026 by willmurphyscode Contributor • Draft
3
feat: scheme-aware shell completion for scan targets
#3437 opened May 10, 2026 by ChrisJr404 Loading…
1
1
feat: warn when picking up .grype.yaml from CWD
#3428 opened May 7, 2026 by ChrisJr404 Loading…
1
6
fix(matcher/golang): surface advisories pinned at import-path granularity (#3398)
#3424 opened May 6, 2026 by ChrisJr404 Loading…
6 tasks done
1
1
feat: add jsonl output format (#1159) needs-discussion
#3415 opened May 2, 2026 by ChrisJr404 Loading…
6 tasks done
1
2
feat(matcher/java): add per-request timeout for Maven SHA1 lookups (#1624)
#3414 opened May 2, 2026 by ChrisJr404 Loading…
4 tasks done
1
Add support for CycloneDX Vex
#3394 opened Apr 24, 2026 by bennetleins Loading…
4 tasks done
1
fix: add amazon_linux as alias for Amazon Linux distro
#3380 opened Apr 19, 2026 by avasis-ai Loading…
1
1
feat: add Grype version and vulnerability DB info to HTML template
#3337 opened Apr 1, 2026 by xingzihai Loading…
feat: integrate RapidFort advisory matching for their curated images
#3327 opened Mar 31, 2026 by vaibhav-rf Loading…
6 tasks
8
fix: select fixes based on constraints instead of any fix version
#3287 opened Mar 16, 2026 by kzantow Contributor • Draft
Add support for CleanStart OS vulnerability scanning
#3281 opened Mar 13, 2026 by cleanstart-community-admin Loading…
3 of 4 tasks
8
feat: generate json-schema for -o json needs-discussion
#3269 opened Mar 6, 2026 by axel7083 Loading…
1
5
ProTip! no:milestone will show everything without a milestone.