All pull requests

Pull requests

• fix(binary): detect julia on linux/arm64, ppc64le and 1.9.0 betas

  #5494·26wv opened Oct 30, 2026·4 tasks done·

  ·
  1

• perf: build lower layer squashes only when a scan reads them

  dependencies
  #5492·wagoodman opened Oct 29, 2026Contributor·

  ·
  1

• Fix yarn.lock dev-dependency filtering for lock files in sub-folders

  #5490·sarankumar1325 opened Oct 29, 2026·4 tasks done·

  ·
  1

• Fix duplicate and misnamed packages for linked entries in package-lock.json

  #5488·jayhemnani9910 opened Oct 29, 2026·4 tasks done·

  ·
  1

• fix(java): map gRPC, OpenCensus, Reactor and other group IDs for jars without pom metadata

  #5487·knutwannheden opened Oct 28, 2026·4 tasks done·

  ·

• fix(java): map Kotlin and kotlinx group IDs for jars without pom metadata

  #5486·knutwannheden opened Oct 28, 2026·4 tasks done·

  ·

• fix(java): resolve ASM 4+ group IDs to org.ow2.asm

  #5485·knutwannheden opened Oct 28, 2026·4 tasks done·

  ·

• fix: use pointer receiver for FileResolver to enable reuse

  #5483·caleballen opened Oct 27, 2026·2 of 5 tasks·

  ·

• fix: skip Linux release identification if there is nothing to parse

  #5482·caleballen opened Oct 27, 2026·1 of 4 tasks·

  ·

• fix(java): skip symbol loading for non-GraalVM ELF files

  #5481·maginseb opened Oct 27, 2026·4 tasks done·

  ·

• chore(deps): update anchore dependencies

  automationchangelog-ignoredependencies
  #5479·anchore-oss-update-bot opened Oct 27, 2026Contributor·

  ·
  12

• fix: generate edge_chromium CPE for Microsoft Edge PE binaries

  #5478·56steve opened Oct 27, 2026·

  ·
  1

• fix: preserve declared Go version from go.mod as stdlib

  #5477·mvanhorn opened Oct 27, 2026Contributor·3 of 9 tasks·

  ·
  1

  1

• chore(deps): update SPDX license list

  automation
  #5474·anchore-oss-update-bot opened Oct 26, 2026Contributor·

  ·

• fix(python): keep single-character names in requirements.txt

  #5469·protonnegativo opened Oct 24, 2026·3 of 4 tasks·

  ·

• fix(python): sort uv.lock extras by name so the SBOM output is stable

  #5468·wleeaf opened Oct 24, 2026·3 of 4 tasks·

  ·
  1

• Find NuGet packages in framework-dependent Windows single-file apps

  #5465·wleeaf opened Oct 23, 2026·4 tasks done·

  ·
  1

  1

• feat(oci): import attested SBOMs from container registries

  dependencies
  #5453·Aur3ns opened Oct 21, 2026·13 of 14 tasks·

  ·

• feat: give unknown hash-based licenses more descriptive names

  #5448·ardentperf opened Oct 20, 2026·4 tasks done·

  ·

• fix: parse the last line of files with no trailing newline

  #5446·spicysharkco opened Oct 19, 2026·3 of 4 tasks·

  ·
  

• feat(spdx): fill package locations when decoding SPDX documents

  #5445·basitalisandhu opened Oct 18, 2026·4 tasks done·

  ·
  1

• Report the packages a package depends on in github-json

  #5444·arpitjain099 opened Oct 18, 2026Contributor·

  ·

• fix(cpe): build apple app bundle CPEs from a curated bundle-id mapping, not the display name

  #5443·choksi2212 opened Oct 18, 2026·

  ·
  1

  1

• fix: accept hyphenated and multi-label email domains in SPDX originator/supplier parsing

  #5442·choksi2212 opened Oct 18, 2026·4 tasks done·

  ·
  1

  3

• fix(golang): emit a stdlib package per Go toolchain in universal Mach-O binaries

  #5440·pujitha24 opened Oct 17, 2026Contributor·4 tasks done·

  ·
  1

  1