Skip to content

Issues: anchore/grype

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

286 Open 663 Closed
286 Open 663 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Likely false positives for erlang otp bug Something isn't working
#2344 opened Dec 19, 2024 by sameerkattel
2
False positive: CVE-2024-26130, CVE-2023-50782, CVE-2023-49083, CVE-2024-0727 python311-cryptography with SLES 15.5 and SLES 15.6 due to noise from Syft bug Something isn't working
#2342 opened Dec 18, 2024 by sekveaja
possible false positives: unicorn package, qnx SDK package bug Something isn't working
#2336 opened Dec 17, 2024 by jurassicLizard
5
False negative: vulns in AL2023 rpm packages were reported but then disappeared bug Something isn't working
#2333 opened Dec 16, 2024 by sparrowt
5
FP in upstream of a package that doesn't exist bug Something isn't working
#2327 opened Dec 12, 2024 by tomersein
Add support for Wind River Linux enhancement New feature or request
#2325 opened Dec 12, 2024 by joshbressers
2
[DOCS] Document your CycloneDX properties documentation Improvements or additions to documentation enhancement New feature or request
#2316 opened Dec 11, 2024 by jkowalleck
1
False positive: GHSA-jjg7-2v4v-x38h (CVE-2024-3651) in SLES 15.6 and 15.5 Ecosystem cause by Syft noise with extra reference bug Something isn't working
#2314 opened Dec 10, 2024 by sekveaja
Automatically determine the current debian sid codename enhancement New feature or request
#2302 opened Dec 4, 2024 by wagoodman
False positive on a custom image with custom python package bug Something isn't working false-positive
#2292 opened Dec 1, 2024 by tony-oss-titan
False Positive: GHSA-gf2q-j2qq-pjf2(CVE-2012-3542) GHSA-mrxv-65rv-6hxq (CVE-2012-4413) GHSA-qvpr-qm6w-6rcc (CVE-2012-5571) keystone 18.x.x, recommend fixed with 2012.x older versioning convention bug Something isn't working epoch relating to issues around version lineage changes false-positive
#2289 opened Nov 27, 2024 by sekveaja
No space left error bug Something isn't working
#2266 opened Nov 19, 2024 by rootlikegroot
2
Failure on SBOM from cdxgen 11.0.0 bug Something isn't working
#2263 opened Nov 16, 2024 by metametadata
@spiffcs
3
False positive:GHSA-wf44-4mgj-rwvx( CVE-2015-3221) neutron 17.x.x, recommend fixed with 2014.x older versioning convention bug Something isn't working epoch relating to issues around version lineage changes needs-investigation
#2262 opened Nov 15, 2024 by sekveaja
Incorrect cve fixed-in version coming in grype output bug Something isn't working
#2253 opened Nov 12, 2024 by nehas4
4
False positive:GHSA-q748-mcwg-xmqv(CVE-2015-5251), GHSA-gvjg-r9fv-7qx9(CVE-2015-5286) glance 21.x.x, recommend fixed with 2014.x older versioning convention bug Something isn't working epoch relating to issues around version lineage changes false-positive
#2252 opened Nov 11, 2024 by sekveaja
1
Document which fields of Syft SBOM are used in processing input enhancement New feature or request
#2249 opened Nov 8, 2024 by chovanecadam Grype 1.0
6
False positive: GHSA-qhch-g8qr-p497 (CVE-2014-3641) cinder 17.4.1.x, recommend fixed with 2014.x older versioning convention. bug Something isn't working epoch relating to issues around version lineage changes needs-investigation
#2240 opened Nov 5, 2024 by sekveaja
5
some non-PEP440 version constraints for GHSA python packages in grype-db bug Something isn't working
#2229 opened Oct 31, 2024 by willmurphyscode
4
Feature request: Grype Convert enhancement New feature or request
#2224 opened Oct 30, 2024 by tidusete
1
POM data should be derived from pom.xml when available bug Something isn't working
#2217 opened Oct 28, 2024 by wagoodman
Should only check maven central if pom info is missing bug Something isn't working
#2216 opened Oct 28, 2024 by wagoodman
3
Replace hashicorp semver lib
#2215 opened Oct 28, 2024 by wagoodman Grype 1.0
Grype Output Schema enhancement New feature or request
#2212 opened Oct 24, 2024 by Amndeep7 Grype 1.0
1
False positive: GHSA-cx63-2mw6-8hw5 (CVE-2024-6345) python311-setuptools in SLES 15.5 Ecosystem cause by Syft noise with extra reference bug Something isn't working false-positive
#2210 opened Oct 23, 2024 by sekveaja
ProTip! Find all open issues with in progress development work with linked:pr.