All pull requests

Pull requests

• Fix crash when cataloging ELF files with a truncated dynamic section

  #5321·somaz94 opened Sep 22, 2026·

  ·
  1

• Kernel module parameters lose, fixed #5318

  #5319·rezmoss opened Sep 22, 2026·

  ·
  1

• CPE generation attributes the umbrella project's product , fixed #5316

  #5317·rezmoss opened Sep 21, 2026·

  ·
  1

• chore(deps): update SPDX license list

  automation
  #5315·anchore-oss-update-bot opened Sep 21, 2026·

  ·

• fix(cpegenerate): normalise PyPI dictionary keys to match cataloger normalisation

  #5314·auyua9 opened Sep 21, 2026·

  ·

• fix(java): resolve Groovy 4+ group IDs to org.apache.groovy

  #5313·texasich opened Sep 21, 2026·

  ·
  1

  1

• chore(deps): update CPE dictionary index

  automation
  #5312·anchore-oss-update-bot opened Sep 21, 2026·

  ·

• fix(haskell): do not panic on a stack.yaml rev pin

  #5310·arpitjain099 opened Sep 19, 2026·

  ·

• chore(deps): update anchore dependencies

  automationchangelog-ignoredependencies
  #5304·anchore-oss-update-bot opened Sep 18, 2026·

  ·

• feat: record CocoaPods EXTERNAL SOURCES on the package

  #5303·az-catch opened Sep 18, 2026·

  ·
  1

• fix: skip docker:// references in github-actions PURL generation

  #5302·yunaremaia opened Sep 18, 2026·

  ·
  1

  3

• fix(githubactions): emit a valid pkg:oci PURL for docker:// use statements

  #5300·chenzeyan54-commits opened Sep 17, 2026·

  ·
  1

• fix: preserve POSIX info paths for dpkg packages when running on Windows

  #5296·dprohaska opened Sep 15, 2026·

  ·

• fix(java): exclude pom profile dependencies that cannot be active

  #5289·kokhlo opened Sep 13, 2026·

  ·
  1

  4

• feat: add download location for go modules

  #5288·kjanat opened Sep 12, 2026·

  ·
  1

• fix(javascript): keep pnpm packages when resolution is nested

  bug
  #5287·vulragrag-star opened Sep 12, 2026·

  ·
  1

  1

• Replace archived anchore/go-version fork with hashicorp/go-version

  dependencies
  #5286·texasich opened Sep 12, 2026·

  ·
  1

• fix(binary): correct traefik version detection on big-endian arches

  #5281·mayanksekhar opened Sep 11, 2026·

  ·
  1

• chore(deps): bump github.com/gohugoio/hashstructure from 0.6.0 to 1.1.0

  dependenciesneeds-manual-review
  #5277·dependabot[bot] opened Sep 11, 2026·

  ·
  2

• feat(terraform): add license detection for terraform providers

  #5263·timols opened Sep 9, 2026·

  ·

• fix(terraform): generate terraform-provider-specific CPEs for terraform lock packages

  #5261·timols opened Sep 8, 2026·

  ·
  1

• Add nested archive cataloging

  #5260·kzantow opened Sep 8, 2026·

  ·
  1

  1

• fix(conan): add libexpat_project CPE candidates for expat packages

  #5259·KR-Ravindra opened Sep 8, 2026·

  ·
  1

  2

• fix(java): do not catalog declared dependencies of an embedded pom.xml

  #5258·Eljees opened Sep 7, 2026·

  ·

• stop reading the mount table for every single-file source

  #5257·dmcg310 opened Sep 7, 2026·

  ·