5 Pull requests merged by 2 people

• chore(deps): update tools to latest versions

  #3478 merged Nov 27, 2024

• chore(deps): update CPE dictionary index

  #3479 merged Nov 27, 2024

• chore(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0

  #3480 merged Nov 27, 2024

• chore(deps): bump github.com/charmbracelet/bubbletea from 1.2.3 to 1.2.4

  #3482 merged Nov 27, 2024

• chore(deps): update stereoscope to be5deed44b7c03fcbfa6f1f42fb67202d31636a9

  #3483 merged Nov 27, 2024

3 Pull requests opened by 3 people

• feat: add cataloger for NuGet packages

  #3484 opened Nov 27, 2024

• chore(deps): update tools to latest versions

  #3487 opened Nov 28, 2024

• chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.2 to 6.6.3

  #3489 opened Nov 28, 2024

1 Issue closed by 1 person

• Remove incorrect power-user help text that only image sources are supported

  #2046 closed Nov 26, 2024

4 Issues opened by 4 people

• SBOM generation for Conanfile.py

  #3488 opened Nov 28, 2024

• missing provided files for dpkg packages

  #3486 opened Nov 28, 2024

• Configurable package merge behavior

  #3485 opened Nov 27, 2024

• Duplicate OpenSSL detection as both deb and binary

  #3481 opened Nov 26, 2024

11 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• add set layer limit

  #3464 commented on Nov 30, 2024 • 4 new comments

• feat(cataloger): add a terraform provider cataloger

  #3378 commented on Nov 29, 2024 • 1 new comment

• Syft scan in offline mode is slow

  #3455 commented on Nov 25, 2024 • 0 new comments

• syft should not warn on known bad package.json

  #3470 commented on Nov 25, 2024 • 0 new comments

• cyclone-dx presenter drops files, includes only packages

  #3435 commented on Nov 25, 2024 • 0 new comments

• Runtime Error with Syft on Singularity .sif file (panic: index out of range)

  #3390 commented on Nov 25, 2024 • 0 new comments

• Duplicate entry in SBOM with local NPM dependencies

  #2559 commented on Nov 26, 2024 • 0 new comments

• javascript-cataloger: false positive - cross-spawn

  #3471 commented on Nov 29, 2024 • 0 new comments

• Look for ruby binary library evidence over executable

  #3420 commented on Nov 29, 2024 • 0 new comments

• Include the OS Information available in the SBOM model in the SPDX reports

  #3462 commented on Nov 25, 2024 • 0 new comments

• Fixes issue #3346

  #3474 commented on Nov 25, 2024 • 0 new comments