anchore/syft

Issues

• javascript-cataloger: false positive - cross-spawn

  #3471 opened a month ago by robertkowalski
  6

• Multiple licenses as string instead of list

  #3430 opened 15 days ago by dariozachow
  2

• purl is not deterministic in java-archive cataloger

  #3521 opened 14 days ago by TimBrown1611
  0

• Runtime Error with Syft on Singularity .sif file (panic: index out of range)

  #3390 opened 14 days ago by SaurabhNair96
  7

• SPDX expressions are lost from CycloneDX if they contain extra parenthesis

  #3441 opened 15 days ago by pasieronen
  2

• Syft scan in offline mode is slow

  #3455 opened a month ago by KeylinxTobias
  6

• [DOCS] Document your CycloneDX properties

  #3497 opened 22 days ago by jkowalleck
  1

• Unable to find encoder for "spdx-json=spdx.json"

  #3515 opened 15 days ago by wieringen
  1

• Standalone Executables not listed in SBOM

  #3511 opened 16 days ago by patrickSeal
  0

• Provide Syft as a Conan package

  #3504 opened 20 days ago by lukas-braune
  0

• Invalid SPDX: missing copyright text

  #3346 opened 21 days ago by vargenau
  3

• Ability to add custom SBOM components as files within Docker image

  #3490 opened 24 days ago by nycnewman
  6

• syft should not warn on known bad package.json

  #3470 opened a month ago by robbat2
  2

• Dotnet PE binary cataloger is detecting false positives

  #3469 opened a month ago by wagoodman
  2

• Raising containers as packages in the final SBOM

  #3477 opened a month ago by spiffcs
  1

• Scanning a source tree with duplicate conanfile.txt dependencies generates multiple components

  #3403 opened 23 days ago by jkugler
  3

• support configuration of layer size in Syft

  #3428 opened 23 days ago by TimBrown1611
  0

• Look for ruby binary library evidence over executable

  #3420 opened 2 months ago by witchcraze
  5

• SBOM generation for Conanfile.py

  #3488 opened a month ago by Ajit-15
  0

• missing provided files for dpkg packages

  #3486 opened a month ago by ArmanPasha
  0

• Configurable package merge behavior

  #3485 opened a month ago by wagoodman
  0

• Duplicate OpenSSL detection as both deb and binary

  #3481 opened a month ago by witchcraze
  1

• cyclone-dx presenter drops files, includes only packages

  #3435 opened a month ago by Pierre-Gronau-ndaal
  1

• [Request] Ability to customize top level metadata

  #3397 opened 2 months ago by idunbarh
  2

• SBOM cataloger silently discards CycloneDX components of other types than library/application

  #3447 opened a month ago by pasieronen
  4

• CPE of linux-kernel not precise enough

  #3437 opened a month ago by rafutek
  2

• file-metadata cataloger can't generate all files md5 from all sbom's file

  #3445 opened a month ago by liukoo
  1

• Dependency trees get merged when they should not

  #3456 opened a month ago by dervoeti
  2

• Add nextcloud server cataloger

  #3458 opened a month ago by westonsteimel
  0

• Add nextcloud app cataloger

  #3459 opened a month ago by westonsteimel
  0

• cataloger: golang source cataloger

  #3451 opened a month ago by spiffcs
  0

• Support node 6.x versions

  #3404 opened a month ago by witchcraze
  0

• Panic on "syft scan"

  #3434 opened a month ago by cilki
  1

• Support file ownership when using file source

  #3345 opened 2 months ago by adammcclenaghan
  1

• Populate known unknowns using standard methods, not by way of error returns

  #3416 opened 2 months ago by kzantow
  0

• Bubble coordinate errors from stereoscope

  #3415 opened 2 months ago by kzantow
  0

• License files which do not match an SPDX expression are erroneously handled as 'unlicensed'.

  #3412 opened 2 months ago by HeyeOpenSource
  0

• conda packages identified as pypi packages

  #3395 opened 2 months ago by vchhasatia
  3

• Support scanning files in other mount namespaces

  #3396 opened 2 months ago by ariel-miculas
  7

• Add a binary classifier for redict

  #3401 opened 2 months ago by westonsteimel
  0

• Add a binary classifier for valkey

  #3400 opened 2 months ago by westonsteimel
  0

• Unconditional recursive call at spyReturningFileResolver.Read

  #3379 opened 2 months ago by chavacava
  0

• "bom-ref" field shows escaped characters for special chars

  #3382 opened 2 months ago by dszortyka
  2

• Conan cataloger: distinquish normal and build requirements - might be relevant for other catalogers as well (e.g. NPM)

  #3386 opened 2 months ago by jngrb
  2

• bug: stop reporting VSCode extensions as NPM packages

  #3381 opened 2 months ago by willmurphyscode
  0

• Refactor Java metadata: use top-level maven metadata & deprecate scope from PomProperties

  #3377 opened 2 months ago by kzantow
  0

• Maven version ranges

  #3368 opened 2 months ago by kzantow
  0

• Delete comment

  #3354 opened 2 months ago by BlowMeMike
  0

• Need to update tag version

  #3349 opened 2 months ago by BlowMeMike
  1

• Asking for guidance with jar file scanning (*.jar files not reporting any dependency in SBOM)

  #3336 opened 2 months ago by markusjnagel
  2