-
Notifications
You must be signed in to change notification settings - Fork 944
Pull requests: anchore/syft
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Detect licenses from Maven pom.xml comments
#5249
opened Sep 3, 2026 by
chrisrueger
•
Draft
4 of 6 tasks
feat(cyclonedx): output source PURL as external reference
#5246
opened Sep 2, 2026 by
swadaptive
Loading…
4 of 9 tasks
chore(deps): update anchore dependencies
automation
created or acted upon by a bot
changelog-ignore
do not add a entry for this when generating the changelog
dependencies
dealing with project dependencies
#5236
opened Aug 28, 2026 by
anchore-oss-update-bot
Contributor
•
Draft
feat(composer): add dependency relationships
#5234
opened Aug 27, 2026 by
Xenira
Contributor
Loading…
4 tasks done
fix(cyclonedx): drop dependency edges that reference packages missing from the catalog
#5233
opened Aug 27, 2026 by
pujitha24
Contributor
Loading…
3 of 4 tasks
fix(javascript): carry lockfile resolved/integrity into CycloneDX
#5230
opened Aug 26, 2026 by
Portll
Loading…
fix(pe): prefer US-English VERSIONINFO strings over last-parsed language block
#5229
opened Aug 25, 2026 by
CAOShurong
Contributor
•
Draft
fix(yarn): classify dev-only deps by union of edges across same-name lockfile entries
#5228
opened Aug 25, 2026 by
CAOShurong
Contributor
•
Draft
fix(relationship): restore same-name guard for binary-overlap exclusion (fixes #5214)
#5227
opened Aug 25, 2026 by
CAOShurong
Contributor
•
Draft
fix(conda): Add prefix to owned files list for environments not in scan root
#5225
opened Aug 24, 2026 by
marcoesters
Loading…
4 tasks done
perf(licenses): prefetch remote licenses concurrently for js lockfiles
#5223
opened Aug 24, 2026 by
CAOShurong
Contributor
•
Draft
fix(dotnet): preserve requested version range in packages.lock.json metadata (#5211)
#5220
opened Aug 23, 2026 by
CAOShurong
Contributor
Loading…
2 tasks done
fix(java): resolve uber-jar version from root version.properties (issue #5163)
#5219
opened Aug 23, 2026 by
CAOShurong
Contributor
Loading…
3 tasks done
feat(java): add support for palantir gradle-consistent-versions versions.lock lockfiles
#5218
opened Aug 23, 2026 by
CAOShurong
Contributor
Loading…
fix(portage): read a CONTENTS path that contains spaces
#5217
opened Aug 23, 2026 by
luantaraschi
Contributor
Loading…
fix(elixir): use Hex package names from mix.lock
#5216
opened Aug 22, 2026 by
sueun-dev
Contributor
Loading…
4 tasks done
fix: don't suppress binaries owned by unrelated OS packages
#5215
opened Aug 22, 2026 by
yzxcj797
Loading…
fix(cpe): generate the correct CPE for Microsoft Edge PE binaries
#5212
opened Aug 21, 2026 by
pujitha24
Contributor
Loading…
4 tasks done
fix(dotnet): resolve packages.lock dependencies deterministically
bug
Something isn't working
#5210
opened Aug 21, 2026 by
spiffcs
Contributor
Loading…
4 tasks done
fix(java): use the OSGi Bundle-Name as the artifact ID
#5200
opened Aug 20, 2026 by
ashvinctrl
Loading…
4 tasks done
fix(cyclonedx): write the authors list instead of the deprecated author field for 1.6 and later
#5199
opened Aug 20, 2026 by
hamodywe
Contributor
Loading…
4 tasks done
fix(binary): select the English VERSIONINFO block from localized PE binaries
#5198
opened Aug 20, 2026 by
hamodywe
Contributor
Loading…
4 tasks done
fix(file-resolver): catalog file digests for directory scans on Windows
#5197
opened Aug 20, 2026 by
hamodywe
Contributor
Loading…
4 tasks done
Previous Next
ProTip!
Type g p on any issue or pull request to go back to the pull request listing page.