All pull requests

Pull requests

• fix(purl): classify julia and bottlerocket packages

  #11325·CalvinTjoaquinn opened Sep 29, 2026·

  ·

• docs(sbom): clarify Rekor source compatibility with Cosign

  kind/documentationscan/sbom
  #11323·knqyf263 opened Sep 28, 2026Collaborator·

  ·
  1

• fix(crypto): skip RSA keys with a modulus too large to validate

  #11319·nikpivkin opened Sep 28, 2026Contributor·

  ·
  1

• fix(module): pass pointer size to WASM free calls

  #11316·Tyagiquamar opened Sep 27, 2026·

  ·
  1

  2

• feat(helm): Add parameter to customize container args

  #11315·mrachuta opened Sep 26, 2026·

  ·

• fix(python): resolve uv dependencies by version when a package is locked in several versions

  #11314·nicoloangileri opened Sep 26, 2026·

  ·
  2

• fix(dotnet): make packages.lock.json parser output deterministic

  #11312·4RH1T3CT0R7 opened Sep 26, 2026·

  ·
  2

• chore(deps): bump alpine to 3.24.2

  dependencies
  #11309·DmitriyLewen opened Sep 25, 2026Contributor·

  ·
  

• chore(alpine): add EOL date for Alpine 3.24 and fix 3.21/3.22 dates

  #11308·DmitriyLewen opened Sep 25, 2026Contributor·

  ·
  

• fix(sbom): set all OS orphan pkgs to parent

  #11304·macedogm opened Sep 23, 2026Contributor·

  ·
  1

• fix(dpkg): build the dependency graph for packages from /var/lib/dpkg/status.d

  #11303·deba310984 opened Sep 23, 2026·

  ·
  1

  1

• perf(crypto): parse each PEM block once per file

  #11302·nikpivkin opened Sep 23, 2026Contributor·

  ·
  2

• feat(vuln): extend RapidFort scanner to Debian, Oracle, Rocky, Alma, and Amazon

  #11285·rfJanit opened Sep 21, 2026Contributor·

  ·
  11

• chore: bump SPDX license IDs and exceptions to v3.29.0

  #11284·DmitriyLewen opened Sep 21, 2026Contributor·

  ·
  

• feat(terraform): resolve registry modules through remote service discovery

  #11277·3rwww1 opened Sep 21, 2026·

  ·
  3

• fix(license): resolve a license in more than one category deterministically

  #11276·Vchekryzhov opened Sep 20, 2026·

  ·
  2

• fix(report): don't panic on unparsable SARIF artifact locations

  #11261·brinkercode opened Sep 17, 2026·

  ·
  1

  1

• fix(k8s): show summary for compliance table reports

  #11258·gulamovzavohir02-glitch opened Sep 16, 2026·

  ·
  1

  1

• refactor(misconf): use json/v2 methods for metadata and range

  #11257·nikpivkin opened Sep 16, 2026Contributor·

  ·
  5

• fix(cargo): retain direct dependencies declared without version

  #11248·aadieng100 opened Sep 14, 2026·

  ·
  1

• docs: fix 'allows to load' grammar in ecosystem explorer notes

  #11242·mrchatam opened Sep 13, 2026·

  ·
  1

  3

• fix(terraform): convert primitives to string in list attributes

  #11223·nikpivkin opened Sep 10, 2026Contributor·

  ·
  1

• feat(helm): make livenessProbe and readinessProbe configurable

  #11220·ebuildy opened Sep 9, 2026·

  ·
  1

• fix(redhat): compare against the installed minor's fix, not the highest fixed version

  #11217·bunnysayzz opened Sep 9, 2026·

  ·
  1

  5

• feat: support multiple package digests with acquisition sources

  #11216·DmitriyLewen opened Sep 9, 2026Contributor·

  ·
  1