chore(deps): update anchore dependencies (#725)

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: willmurphyscode <[email protected]>

chore(deps): update anchore dependencies (#713)

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: spiffcs <[email protected]>

ci: update quality gate label data (#702)

Signed-off-by: Weston Steimel <[email protected]>

fail DB build (optionally) on missing fix date (#694)

Signed-off-by: Alex Goodman <[email protected]>

chore(deps): update anchore dependencies (#691)

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: spiffcs <[email protected]>

add support for annotated openvex (#685)

Signed-off-by: Alex Goodman <[email protected]>

use results db (#683)

Signed-off-by: Alex Goodman <[email protected]>

add advisory date to msrc (#659)

Signed-off-by: Alex Goodman <[email protected]>

fix: recognize jvm versions at DB build time (#647)

When processing CPEs in the NVD provider, if a CPE seems to be for a
JVM based on its package namme, set its version type to be "jvm" so that
grype knows at match time to use special comparison logic for JVM
versions.

Signed-off-by: Will Murphy <[email protected]>

add custom compressor commands to the config (#635)

Signed-off-by: Alex Goodman <[email protected]>