1 Release published by 1 person

• v0.85.0

  published Nov 21, 2024

8 Pull requests merged by 4 people

• Remove DB v1 & v2 schemas

  #2278 merged Nov 21, 2024

• Add data-driven approach to v6 distro search

  #2265 merged Nov 21, 2024

• core dependencies: latest syft v1.17.0 and latest stereoscope v0.0.9

  #2275 merged Nov 21, 2024

• chore(deps): bump github/codeql-action from 3.27.4 to 3.27.5

  #2272 merged Nov 20, 2024

• chore(deps): bump github.com/charmbracelet/bubbletea from 1.2.2 to 1.2.3

  #2273 merged Nov 20, 2024

• chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7

  #2274 merged Nov 20, 2024

• chore(deps): update tools to latest versions

  #2269 merged Nov 20, 2024

• fix: bump clio to fix logging when no tty present

  #2268 merged Nov 19, 2024

3 Pull requests opened by 3 people

• Filter unrelated fixed version

  #2271 opened Nov 20, 2024

• Simplify v6 distribution material

  #2277 opened Nov 21, 2024

• chore(deps): bump anchore/sbom-action from 0.17.7 to 0.17.8

  #2279 opened Nov 22, 2024

4 Issues closed by 3 people

• Please update Winget

  #2270 closed Nov 21, 2024

• Difficulty with OpenJDK versions

  #1640 closed Nov 21, 2024

• Grype DB schemas v1 & v2 are EOL

  #2075 closed Nov 21, 2024

• Display warnings even when `-v` is not passed and no tty is present

  #2180 closed Nov 19, 2024

4 Issues opened by 4 people

• Add missing package information for Sarif report

  #2267 opened Nov 19, 2024

• No space left error

  #2266 opened Nov 19, 2024

• list of unrelated versions in the remediation

  #2264 opened Nov 17, 2024

• Failure on SBOM from cdxgen 11.0.0

  #2263 opened Nov 16, 2024

5 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Add purls in sarif report

  #2254 commented on Nov 22, 2024 • 3 new comments

• False positive: GHSA-3ww4-gg4f-jr7f(CVE-2023-50782),GHSA-x4qr-2fvf-3mr5 (CVE-2023-0286), GHSA-jfhm-5ghh-2f97 (CVE-2023-49083), GHSA-w7pp-m8wf-vj6r (CVE-2023-23931) GHSA-9v9h-cgj8-h64p (CVE-2024-0727) in SLES 15.5 Ecosystem but trigger by cryptography

  #1935 commented on Nov 19, 2024 • 0 new comments

• False positive: GHSA-qhch-g8qr-p497 (CVE-2014-3641) cinder 17.4.1.x, recommend fixed with 2014.x older versioning convention.

  #2240 commented on Nov 20, 2024 • 0 new comments

• False positive:GHSA-wf44-4mgj-rwvx( CVE-2015-3221) neutron 17.x.x, recommend fixed with 2014.x older versioning convention

  #2262 commented on Nov 20, 2024 • 0 new comments

• Mariner Linux "util-linux" package FP

  #2181 commented on Nov 21, 2024 • 0 new comments