Search results

CycloneDX SBOM file not recognized

bugSomething isn't workingSomething isn't working

Status: Open.

#3373 In anchore/grype;

· kninxx opened on Apr 17, 2026

Schema v7 Wish List

Status: Open.

#3369 In anchore/grype;

· wagoodman opened on Apr 15, 2026

Expand ignore rules to owned sub packages of distro packages

enhancementNew feature or requestNew feature or request

Status: Open.

#3368 In anchore/grype;

· willmurphyscode opened on Apr 14, 2026

False Positive: CVE-2026-27205 Flask and CVE-2024-34069 Werkzeug coming from Python ecosystem

bugSomething isn't workingSomething isn't working

package-overlapIssues where two packages, e.g. a pypi package and an RPM, own overlapping filesIssues where two packages, e.g. a pypi package and an RPM, own overlapping files

Status: Open.

#3354 In anchore/grype;

· etarast opened on Apr 7, 2026

Option to choose CycloneDX Json output spec version

enhancementNew feature or requestNew feature or request

Status: Open.

#3350 In anchore/grype;

· nicoskiy opened on Apr 3, 2026

Proposal: zarf package scan target

enhancementNew feature or requestNew feature or request

multiple-sourcesIssues that are dependent on supporting multiple sourcesIssues that are dependent on supporting multiple sources

needs-investigation

needs-proposalShould be done but needs proposal/design for further discussionShould be done but needs proposal/design for further discussion

Status: Open.

#3329 In anchore/grype;

· brandtkeller opened on Mar 31, 2026

--only-fixed seems not to work with python

bugSomething isn't workingSomething isn't working

false-positive

Status: Open.

#3312 In anchore/grype;

· ruben-herold opened on Mar 25, 2026

Proposal: Support OCI image as the primary vulnerable software entity (Image-as-a-Product)

enhancementNew feature or requestNew feature or request

needs-discussion

Status: Open.

#3302 In anchore/grype;

· willmurphyscode opened on Mar 20, 2026

False Positive: GHSA-38jv-5279-wg99 (CVE-2026-21441) urllib3 coming from Python ecosystem

bugSomething isn't workingSomething isn't working

package-overlapIssues where two packages, e.g. a pypi package and an RPM, own overlapping filesIssues where two packages, e.g. a pypi package and an RPM, own overlapping files

Status: Open.

#3296 In anchore/grype;

· etarast opened on Mar 19, 2026

Numerous OSV transformer improvements proposed simultaneously

osvThings to do with OSV formatted data, osv.dev, etc.Things to do with OSV formatted data, osv.dev, etc.

Status: Open.

#3294 In anchore/grype;

· willmurphyscode opened on Mar 17, 2026

False positive findings in Grype

bugSomething isn't workingSomething isn't working

Status: Open.

#3288 In anchore/grype;

· ashu4 opened on Mar 17, 2026

grype detects npm issues in composer packages if the contain package.json file

bugSomething isn't workingSomething isn't working

Status: Open.

#3279 In anchore/grype;

· yariksheptykin opened on Mar 11, 2026