Search results

Correct packages and relationships for ELF notes referencing dynamically loaded libraries

bugSomething isn't workingSomething isn't working

Status: Open.

#4604 In anchore/syft;

· kzantow opened on Feb 5, 2026

--exclude-dev-deps doesn’t work with pnpm v9+ lockfiles

bugSomething isn't workingSomething isn't working

Status: Open.

#4603 In anchore/syft;

· rezmoss opened on Feb 5, 2026

Enhance the CPE mapping index to include distro package to CPE mapping from release-monitoring.org

enhancementNew feature or requestNew feature or request

Status: Open.

#4599 In anchore/syft;

· westonsteimel opened on Feb 5, 2026

[BUG]: Syft generates incorrect PURLs for legacy JARs missing Maven metadata, causing Grype false negatives

bugSomething isn't workingSomething isn't working

Status: Open.

#4598 In anchore/syft;

· debasishbsws opened on Feb 5, 2026

CycloneDX format SBOM has wrong <code>metadata.component.bom-ref</code> and bom ref type for source code repo

enhancementNew feature or requestNew feature or request

Status: Open.

#4595 In anchore/syft;

· KamalNamdeoTR opened on Feb 4, 2026

CycloneDX JSON output keeps absolute paths even if <code>--base-path</code> is set

bugSomething isn't workingSomething isn't working

Status: Open.

#4592 In anchore/syft;

· mhatzl opened on Feb 2, 2026

valkey is detected as both of valkey and redis

bugSomething isn't workingSomething isn't working

Status: Open.

#4591 In anchore/syft;

· witchcraze opened on Feb 2, 2026

Support envoy binary various versions

bugSomething isn't workingSomething isn't working

Status: Open.

#4590 In anchore/syft;

· witchcraze opened on Feb 1, 2026

Add scan duration timer to Syft

enhancementNew feature or requestNew feature or request

Status: Open.

#4587 In anchore/syft;

· enzofrnt opened on Jan 30, 2026

[Performance] Optimize memory usage for large JavaScript SBOM generation (3-5GB → 1GB)

Status: Open.

#4586 In anchore/syft;

· matthyx opened on Jan 30, 2026

SBOM generation failure when .tar.gz is part of the file name of a JSON

bugSomething isn't workingSomething isn't working

Status: Open.

#4582 In anchore/syft;

· ravikishore1405 opened on Jan 30, 2026

Eliminate deprecated field metadata.tools.components.author on cyclonedx 1.6 format

bugSomething isn't workingSomething isn't working

Status: Open.

#4580 In anchore/syft;

· brian-223134 opened on Jan 29, 2026