Search results

OS package (deb) components duplicated as pypi components

bugSomething isn't workingSomething isn't working

Status: Open.

#4760 In anchore/syft;

· bwt-sloanj opened on Apr 10, 2026

Syft does not use parent pom.xml for license detection if MANIFEST.MF contains Bundle-License

bugSomething isn't workingSomething isn't working

Status: Open.

#4747 In anchore/syft;

· Walnussbaer opened on Apr 7, 2026

Incorrect CPE for .NET Runtime?

bugSomething isn't workingSomething isn't working

good-first-issueGood for newcomersGood for newcomers

Status: Open.

#4738 In anchore/syft;

· catsburg opened on Apr 3, 2026

javascript.include-dev-dependencies does not appear to work for pnpm-lock.yaml

bugSomething isn't workingSomething isn't working

Status: Open.

#4734 In anchore/syft;

· xnox opened on Apr 2, 2026

Compressed kernel modules are not scanned by the linux-kernel-cataloger

bugSomething isn't workingSomething isn't working

Status: Open.

#4721 In anchore/syft;

· youennlj-sfl opened on Mar 31, 2026

CycloneDX BOM contains invalid externalReferences URL from unresolved Ruby gemspec interpolation (e.g. #{s.name})

bugSomething isn't workingSomething isn't working

Status: Open.

#4720 In anchore/syft;

· milad-a-j opened on Mar 31, 2026

squashfs breaks with godisk-fs 1.8.0

bugSomething isn't workingSomething isn't working

Status: Open.

#4718 In anchore/syft;

· sgaist opened on Mar 30, 2026

syft creates a wrong CPE for libpcap

bugSomething isn't workingSomething isn't working

Status: Open.

#4712 In anchore/syft;

· alor opened on Mar 27, 2026

fix parsing of debian/copyright files

bugSomething isn't workingSomething isn't working

good-first-issueGood for newcomersGood for newcomers

Status: Open.

#4708 In anchore/syft;

· tmuehlbacher-bnr opened on Mar 27, 2026

Handle negate filepath exclude patterns or allow include patterns

enhancementNew feature or requestNew feature or request

Status: Open.

#4702 In anchore/syft;

· mhatzl opened on Mar 26, 2026

maven/org.aspectj.runtime/aspectjrt@1.9.25.1 license is wrongly integrated into SBOM

bugSomething isn't workingSomething isn't working

Status: Open.

#4700 In anchore/syft;

· hagen85 opened on Mar 24, 2026

Yarn Berry lockfile parser incorrectly deduplicates packages with multiple resolutions

bugSomething isn't workingSomething isn't working

good-first-issueGood for newcomersGood for newcomers

Status: Open.

#4691 In anchore/syft;

· calumleslie opened on Mar 23, 2026