Search results

Zarf scans emit warnings for consistently unreadable files (i.e., included non-SBOMs)

bugSomething isn't workingSomething isn't working

Status: Open.

#3516 In anchore/grype;

· jphalliwell opened on Jun 18, 2026

Include match details in the CycloneDX output format

enhancementNew feature or requestNew feature or request

Status: Open.

#3513 In anchore/grype;

· chovanecadam opened on Jun 17, 2026

Include vulnerable ranges in CycloneDX output format

enhancementNew feature or requestNew feature or request

Status: Open.

#3512 In anchore/grype;

· chovanecadam opened on Jun 17, 2026

Deduplicate Go matches that are aliases of each other (same CVE reported under both a govulndb GO-* ID and its GHSA)

ecosystem:gorelating to the golang ecosystemrelating to the golang ecosystem

needs-discussion

Status: Open.

#3511 In anchore/grype;

· philroche opened on Jun 17, 2026

False positive: rangeless govulndb (GO-*) Go matches reported as unfixed when an aliased GHSA in the same DB carries the fix

ecosystem:gorelating to the golang ecosystemrelating to the golang ecosystem

Status: Open.

#3510 In anchore/grype;

· philroche opened on Jun 17, 2026

grype db search does not properly parse golang PURL

bugSomething isn't workingSomething isn't working

Status: Open.

#3508 In anchore/grype;

· gnyahay opened on Jun 16, 2026

Issue when using grype on Raspberry Pi OS

bugSomething isn't workingSomething isn't working

Status: Open.

#3507 In anchore/grype;

· ghollingworth opened on Jun 16, 2026

Document Windows PowerShell encoding caveat when redirecting JSON output

Status: Open.

#3505 In anchore/grype;

· chiyi-creator opened on Jun 15, 2026

Licensing: copyright owner missing, needed for Debian packaging

enhancementNew feature or requestNew feature or request

Status: Open.

#3501 In anchore/grype;

· auyer opened on Jun 11, 2026

FALSE NEGATIVE: Recent Tomcat vulnerabilities are not detected (e.g., CVE-2026-43512)

bugSomething isn't workingSomething isn't working

false-negative

Status: Open.

#3491 In anchore/grype;

· imperatives opened on Jun 3, 2026

What is actually being matched (Syft SBOM, Grype and vex)

Status: Open.

#3476 In anchore/grype;

· duckasylum opened on Jun 1, 2026

Feature Request: Integrate FriendsOfPHP/security-advisories to fix delayed CVE detection for PHP packages

enhancementNew feature or requestNew feature or request

Status: Open.

#3466 In anchore/grype;

· vincent-philippe opened on May 27, 2026