Search results

Add support for Bun lockfile (bun.lock)

enhancementNew feature or requestNew feature or request

Status: Open.

#4617 In anchore/syft;

· hnnynh opened on Feb 12, 2026

[BUG] Incorrect Maven PURL generation: <code>Automatic-Module-Name</code> should not be used as Maven groupId

bugSomething isn't workingSomething isn't working

Status: Open.

#4611 In anchore/syft;

· debasishbsws opened on Feb 9, 2026

Support mongo binary various versions

bugSomething isn't workingSomething isn't working

Status: Open.

#4609 In anchore/syft;

· witchcraze opened on Feb 8, 2026

Correct packages and relationships for ELF notes referencing dynamically loaded libraries

bugSomething isn't workingSomething isn't working

Status: Open.

#4604 In anchore/syft;

· kzantow opened on Feb 5, 2026

--exclude-dev-deps doesn’t work with pnpm v9+ lockfiles

bugSomething isn't workingSomething isn't working

Status: Open.

#4603 In anchore/syft;

· rezmoss opened on Feb 5, 2026

Enhance the CPE mapping index to include distro package to CPE mapping from release-monitoring.org

enhancementNew feature or requestNew feature or request

Status: Open.

#4599 In anchore/syft;

· westonsteimel opened on Feb 5, 2026

[BUG]: Syft generates incorrect PURLs for legacy JARs missing Maven metadata, causing Grype false negatives

bugSomething isn't workingSomething isn't working

Status: Open.

#4598 In anchore/syft;

· debasishbsws opened on Feb 5, 2026

CycloneDX format SBOM has wrong <code>metadata.component.bom-ref</code> and bom ref type for source code repo

enhancementNew feature or requestNew feature or request

Status: Open.

#4595 In anchore/syft;

· KamalNamdeoTR opened on Feb 4, 2026

CycloneDX JSON output keeps absolute paths even if <code>--base-path</code> is set

bugSomething isn't workingSomething isn't working

Status: Open.

#4592 In anchore/syft;

· mhatzl opened on Feb 2, 2026

valkey is detected as both of valkey and redis

bugSomething isn't workingSomething isn't working

Status: Open.

#4591 In anchore/syft;

· witchcraze opened on Feb 2, 2026

Support envoy binary various versions

bugSomething isn't workingSomething isn't working

Status: Open.

#4590 In anchore/syft;

· witchcraze opened on Feb 1, 2026

Add scan duration timer to Syft

enhancementNew feature or requestNew feature or request

Status: Open.

#4587 In anchore/syft;

· enzofrnt opened on Jan 30, 2026