-
### Current Behavior
I collected the sbom of all rpm packages in the CentOS system through the syft(https://github.com/anchore/syft) tool, the format of the sbom file is cyclonedx-json, then I upload…
-
### Bug Description
I'm building a snap locally using `--use-lxd` and it sometimes fails to build. I would expect `--debug` to allow me to drop into the container to debug the process.
Unfortunat…
popey updated
3 weeks ago
-
### Bug Description
I am making a prototype of three snaps of [syft](https://github.com/anchore/syft), [grype](https://github.com/anchore/grype), and [grant](https://github.com/anchore/grant). They a…
-
# Issue
Recently in our CI, we have been experiencing grype db tcp read timeouts while downloading the db as part of using the action. This is leading to delayed and failed CVE scanning / additional …
-
**What happened**:
Unexpected warnings:
```
# grype --name fs dir:/
...
[0001] WARN unable to resolve java package identifier from purl="pkg:maven/software.amazon.awscdk/aws-cdk-lib@%cdk-ver…
-
**What happened**:
```console
$ grype db update
✔ Vulnerability DB [updated]
Vulnerability database updated to latest version!
$ grype db status
Location: /Users/dan/Library/C…
-
Latest buildpacksio/pack v0.35.1 triggered CVE(s) from Grype. For further details, see: https://github.com/buildpacks/pack/actions/runs/10344879230
-
Does grype support openeuler system?If it is not supported, whether it will be supported later?
-
**What happened**:
*Note*: Opened issue in grype (https://github.com/anchore/grype/issues/1782) but thought it's more directly related to syft.
Related to bug reported in grype: https://github.c…
-
**What would you like to be added**:
I think grype can also cover EOL packages.
information is handled here - https://endoflife.date/
this website has an API which we can get the information, both …