-
Notifications
You must be signed in to change notification settings - Fork 865
Pull requests: anchore/grype
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
chore(deps): bump github.com/hashicorp/go-getter from 1.8.6 to 1.8.8
dependencies
dealing with project dependencies
#3667
opened Aug 21, 2026 by
dependabot
Bot
Loading…
chore(deps): bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.7
#3666
opened Aug 21, 2026 by
dependabot
Bot
Loading…
chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0
dependencies
dealing with project dependencies
#3665
opened Aug 21, 2026 by
dependabot
Bot
Loading…
chore(deps): bump golang.org/x/tools from 0.48.0 to 0.49.0
dependencies
dealing with project dependencies
#3664
opened Aug 21, 2026 by
dependabot
Bot
Loading…
fix(db search): use the full namespaced package name from a PURL
#3662
opened Aug 21, 2026 by
theadsingh
Loading…
fix(bug): package_url mismatchs vex document on namespace/name
#3659
opened Aug 19, 2026 by
spiffcs
Contributor
Loading…
fix(version): prevent panic on portage versions without digits
#3655
opened Aug 16, 2026 by
ashvinctrl
Loading…
fix: keep the PURL namespace when searching the db by package URL
#3654
opened Aug 15, 2026 by
aron-intframe
Loading…
chore(deps): update anchore dependencies
automation
created or acted upon by a bot
changelog-ignore
do not add a entry for this when generating the changelog
dependencies
dealing with project dependencies
#3648
opened Aug 11, 2026 by
anchore-oss-update-bot
Contributor
•
Draft
fix(db): preserve http.Client timeout when applying user agent
#3646
opened Aug 9, 2026 by
pujitha24
Loading…
fix: treat Amazon Linux's ALAS feed as comprehensive when deduplicati…
#3643
opened Aug 8, 2026 by
hamodywe
Loading…
fix(match): skip packages with an empty version like the "unknown" sentinel
#3641
opened Aug 7, 2026 by
sueun-dev
Loading…
chore(deps): bump github.com/gocsaf/csaf/v3 from 3.5.1 to 3.6.0
dependencies
dealing with project dependencies
#3638
opened Aug 7, 2026 by
dependabot
Bot
Loading…
feat(apk/matcher): apk matcher does alias aware aggregation
#3634
opened Aug 6, 2026 by
crosleyzack
Contributor
Loading…
fix: mark NVD records as disputed status based on cveTags
#3633
opened Aug 6, 2026 by
pujitha24
Loading…
fix: don't reorder a match's fix versions while sorting
#3632
opened Aug 5, 2026 by
Dashtid
Contributor
Loading…
fix: make --by-cve merge pick a stable record
#3631
opened Aug 5, 2026 by
Dashtid
Contributor
Loading…
chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4
#3623
opened Jul 31, 2026 by
dependabot
Bot
Loading…
Previous Next
ProTip!
Adding no:label will show everything without a label.