anchore/scan-action issues and pull requests

#404 - chore(deps): update Grype to v0.84.0

Pull Request - State: closed - Opened by anchore-actions-token-generator[bot] 17 days ago
Labels: dependencies

#403 - chore(deps-dev): bump eslint from 9.13.0 to 9.14.0

Pull Request - State: closed - Opened by dependabot[bot] 19 days ago
Labels: dependencies, minor, javascript

#402 - chore(deps): bump @actions/cache from 3.2.4 to 3.3.0

Pull Request - State: closed - Opened by dependabot[bot] 19 days ago
Labels: dependencies, minor, javascript

#401 - chore(deps-dev): bump tslib from 2.8.0 to 2.8.1

Pull Request - State: closed - Opened by dependabot[bot] 22 days ago - 1 comment
Labels: dependencies, patch, javascript

#400 - Adjust upload-sarif version to v3

Pull Request - State: closed - Opened by crnnr 24 days ago

#399 - Adjust upload-sarif version to v3

Pull Request - State: closed - Opened by crnnr 24 days ago

#398 - chore(deps): update Grype to v0.83.0

Pull Request - State: closed - Opened by anchore-actions-token-generator[bot] 24 days ago
Labels: dependencies

#397 - Support template format

Issue - State: open - Opened by acouch 28 days ago - 4 comments

#396 - feat: add support for cyclonedx and cyclonedx-json output-formats

Pull Request - State: open - Opened by ps-e 28 days ago

#395 - chore(deps): bump actions/setup-node from 4.0.4 to 4.1.0

Pull Request - State: closed - Opened by dependabot[bot] 28 days ago
Labels: dependencies, minor, github_actions

#394 - chore(deps): bump actions/checkout from 4.2.1 to 4.2.2

Pull Request - State: closed - Opened by dependabot[bot] 30 days ago
Labels: dependencies, patch, github_actions

#393 - chore(deps): update Grype to v0.82.2

Pull Request - State: closed - Opened by anchore-actions-token-generator[bot] about 1 month ago
Labels: dependencies

#392 - chore(deps-dev): bump eslint from 9.12.0 to 9.13.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago
Labels: dependencies, minor, javascript

#391 - chore(deps-dev): bump tslib from 2.7.0 to 2.8.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago
Labels: dependencies, minor, javascript

#390 - Action continues on non-vulnerability failures

Issue - State: open - Opened by kzantow about 1 month ago
Labels: bug

#389 - chore(deps): update Grype to v0.82.1

Pull Request - State: closed - Opened by anchore-actions-token-generator[bot] about 1 month ago
Labels: dependencies

#388 - Add release docs

Pull Request - State: closed - Opened by wagoodman about 1 month ago
Labels: dependencies

#387 - chore: add changelog ignore

Pull Request - State: closed - Opened by willmurphyscode about 1 month ago
Labels: changelog-ignore

#386 - chore(deps): bump actions/checkout from 4.2.0 to 4.2.1

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago
Labels: dependencies, patch, github_actions

#385 - chore: remove blocking workflow

Pull Request - State: closed - Opened by spiffcs about 1 month ago

#384 - chore: update sha to correct pin for workflow actions

Pull Request - State: closed - Opened by spiffcs about 2 months ago

#383 - chore(deps): update Grype to v0.82.0

Pull Request - State: closed - Opened by anchore-actions-token-generator[bot] about 2 months ago
Labels: dependencies

#382 - chore(deps): bump @actions/core from 1.11.0 to 1.11.1

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago - 5 comments
Labels: dependencies, patch, javascript

#381 - chore(deps-dev): bump eslint from 9.11.1 to 9.12.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago - 1 comment
Labels: dependencies, minor, javascript

#380 - chore: update and pin versions for auto dependabot build steps

Pull Request - State: closed - Opened by spiffcs about 2 months ago

#379 - chore(deps): bump @actions/core from 1.10.1 to 1.11.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago - 1 comment
Labels: dependencies, minor, javascript

#378 - BUG - fail-build behavior takes on severity-cutoff unintentionally

Issue - State: open - Opened by RLI-Rdeaton about 2 months ago - 10 comments
Labels: bug, good first issue

#377 - chore(deps): bump actions/checkout from 4.1.7 to 4.2.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago
Labels: dependencies, minor, github_actions

#376 - chore(deps-dev): bump eslint from 9.9.0 to 9.11.1

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago
Labels: dependencies, minor, javascript

#375 - chore(deps-dev): bump @vercel/ncc from 0.38.1 to 0.38.2

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago - 1 comment
Labels: dependencies, patch, javascript

#374 - chore(deps-dev): bump eslint from 9.9.0 to 9.11.0

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago - 1 comment
Labels: dependencies, minor, javascript

#373 - chore(deps): bump peter-evans/create-pull-request from 6.1.0 to 7.0.5

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago
Labels: dependencies, major, github_actions

#372 - chore(deps): bump peter-evans/create-pull-request from 6.1.0 to 7.0.3

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago - 1 comment
Labels: dependencies, major, github_actions

#371 - chore(deps): bump peter-evans/create-pull-request from 6.1.0 to 7.0.2

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago - 1 comment
Labels: dependencies, major, github_actions

#370 - chore(deps): update Grype to v0.81.0

Pull Request - State: closed - Opened by anchore-actions-token-generator[bot] 2 months ago
Labels: dependencies

#369 - chore(deps-dev): bump husky from 9.1.4 to 9.1.6

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago - 1 comment
Labels: dependencies, patch, javascript

#368 - chore(deps-dev): bump better-npm-audit from 3.8.3 to 3.11.0

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago - 2 comments
Labels: dependencies, minor, javascript

#367 - chore(deps-dev): bump eslint from 9.9.0 to 9.10.0

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago - 1 comment
Labels: dependencies, minor, javascript

#366 - chore(deps): bump peter-evans/create-pull-request from 6.1.0 to 7.0.1

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 1 comment
Labels: dependencies, major, github_actions

#365 - chore(deps): bump peter-evans/create-pull-request from 6.1.0 to 7.0.0

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 1 comment
Labels: dependencies, major, github_actions

#364 - chore(deps-dev): bump better-npm-audit from 3.8.3 to 3.10.0

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 1 comment
Labels: dependencies, minor, javascript

#363 - chore(deps-dev): bump better-npm-audit from 3.8.3 to 3.9.0

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 1 comment
Labels: dependencies, minor, javascript

#362 - chore(deps-dev): bump lint-staged from 15.2.9 to 15.2.10

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, patch, javascript

#361 - Distroless warnings

Issue - State: open - Opened by Kalovelo 3 months ago - 1 comment

#360 - chore(deps-dev): bump eslint from 9.9.0 to 9.9.1

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 1 comment
Labels: dependencies, patch, javascript

#359 - chore(deps-dev): bump tslib from 2.6.3 to 2.7.0

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, minor, javascript

#358 - chore(deps): update Grype to v0.80.0

Pull Request - State: closed - Opened by anchore-actions-token-generator[bot] 3 months ago
Labels: dependencies

#357 - chore(deps-dev): bump husky from 9.1.4 to 9.1.5

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 1 comment
Labels: dependencies, patch, javascript

#356 - chore(deps-dev): bump better-npm-audit from 3.7.3 to 3.8.3

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, minor, javascript

#355 - chore(deps-dev): bump eslint from 9.8.0 to 9.9.0

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 1 comment
Labels: dependencies, minor, javascript

#354 - Update slack to discourse

Pull Request - State: closed - Opened by popey 3 months ago

#353 - chore(deps-dev): bump lint-staged from 15.2.7 to 15.2.8

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, patch, javascript

#352 - chore(deps): update Grype to v0.79.6

Pull Request - State: closed - Opened by anchore-actions-token-generator[bot] 4 months ago
Labels: dependencies

#351 - chore(deps-dev): bump husky from 9.1.3 to 9.1.4

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, patch, javascript

#350 - chore(deps-dev): bump husky from 9.1.1 to 9.1.3

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, patch, javascript

#349 - chore(deps-dev): bump eslint from 9.7.0 to 9.8.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, minor, javascript

#348 - chore: short-lived grype-db cache

Pull Request - State: closed - Opened by kzantow 4 months ago - 2 comments
Labels: enhancement, major

#347 - chore(deps-dev): bump husky from 9.1.1 to 9.1.2

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, patch, javascript

#346 - feat: add output-file option, default to random directory output in temp

Pull Request - State: open - Opened by kzantow 4 months ago - 1 comment
Labels: major

#345 - chore(deps-dev): bump husky from 9.0.11 to 9.1.1

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 2 comments
Labels: dependencies, minor, javascript

#344 - chore(deps-dev): bump husky from 9.0.11 to 9.1.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, minor, javascript

#343 - docs: CODE_OF_CONDUCT.md

Pull Request - State: closed - Opened by popey 4 months ago

#342 - Syft upgrade causes SPDX format specVersion mismatch

Issue - State: closed - Opened by hermankruger 4 months ago - 4 comments

#341 - chore(deps): update Grype to v0.79.3

Pull Request - State: closed - Opened by anchore-actions-token-generator[bot] 4 months ago
Labels: dependencies

#340 - chore(deps-dev): bump eslint from 9.6.0 to 9.7.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, minor, javascript

#339 - chore(deps-dev): bump prettier from 3.3.2 to 3.3.3

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, patch, javascript

#338 - chore(deps): update Grype to v0.79.2

Pull Request - State: closed - Opened by anchore-actions-token-generator[bot] 5 months ago
Labels: dependencies

#337 - chore(deps): update Grype to v0.79.2

Pull Request - State: closed - Opened by anchore-actions-token-generator[bot] 5 months ago - 1 comment
Labels: dependencies

#336 - fix: download Grype directly on Windows

Pull Request - State: closed - Opened by willmurphyscode 5 months ago

#335 - chore(deps-dev): bump eslint from 8.57.0 to 9.6.0

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 2 comments
Labels: dependencies, major, javascript

#334 - chore(deps): bump peter-evans/create-pull-request from 6.0.5 to 6.1.0

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, minor, github_actions

#333 - chore(deps-dev): bump eslint from 8.57.0 to 9.5.0

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, major, javascript

#332 - chore(deps-dev): bump braces from 3.0.2 to 3.0.3

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, patch, javascript

#331 - chore(deps): update Grype to v0.79.2

Pull Request - State: closed - Opened by anchore-actions-token-generator[bot] 5 months ago - 2 comments
Labels: dependencies

#330 - chore(deps): bump actions/checkout from 4.1.6 to 4.1.7

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, patch, github_actions

#329 - chore(deps-dev): bump lint-staged from 15.2.2 to 15.2.7

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, patch, javascript

#328 - chore(deps-dev): bump lint-staged from 15.2.2 to 15.2.6

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, patch, javascript

#327 - chore(deps-dev): bump prettier from 3.3.0 to 3.3.2

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, patch, javascript

#326 - chore(deps-dev): bump prettier from 3.3.0 to 3.3.1

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, patch, javascript

#325 - chore(deps-dev): bump tslib from 2.6.2 to 2.6.3

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 2 comments
Labels: dependencies, patch, javascript

#324 - chore(deps-dev): bump eslint from 8.57.0 to 9.4.0

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, major, javascript

#323 - chore(deps-dev): bump prettier from 3.2.5 to 3.3.0

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago
Labels: dependencies, minor, javascript

#322 - chore(deps): update Grype to v0.78.0

Pull Request - State: closed - Opened by anchore-actions-token-generator[bot] 6 months ago
Labels: dependencies

#321 - Having the action report only certain level of vulnerabilities and above

Issue - State: open - Opened by pantelis-karamolegkos 6 months ago - 2 comments
Labels: enhancement

#320 - chore(deps-dev): bump lint-staged from 15.2.2 to 15.2.5

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, patch, javascript

#319 - Document grype-version parameter

Pull Request - State: closed - Opened by vprivat-ads 6 months ago - 2 comments

#318 - chore(deps-dev): bump lint-staged from 15.2.2 to 15.2.4

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, patch, javascript

#317 - chore(deps): update Grype to v0.77.4

Pull Request - State: closed - Opened by anchore-actions-token-generator[bot] 6 months ago
Labels: dependencies

#316 - chore(deps-dev): bump eslint from 8.57.0 to 9.3.0

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, major, javascript

#315 - fix: download grype on windows runners

Pull Request - State: closed - Opened by kzantow 6 months ago

#314 - chore(deps): bump actions/checkout from 4.1.5 to 4.1.6

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 3 comments
Labels: dependencies, patch, github_actions

#313 - Support for windows

Issue - State: closed - Opened by saisatishkarra 6 months ago

#312 - chore(deps): update Grype to v0.77.4

Pull Request - State: closed - Opened by anchore-actions-token-generator[bot] 7 months ago
Labels: dependencies

#311 - chore(deps): update Grype to v0.77.3

Pull Request - State: closed - Opened by anchore-actions-token-generator[bot] 7 months ago
Labels: dependencies

#310 - chore(deps): bump actions/checkout from 4.1.4 to 4.1.5

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago
Labels: dependencies, patch, github_actions

#309 - chore(deps-dev): bump eslint from 8.57.0 to 9.2.0

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 1 comment
Labels: dependencies, major, javascript

#308 - chore(deps): bump peter-evans/create-pull-request from 6.0.3 to 6.0.5

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago
Labels: dependencies, patch, github_actions

#307 - chore(deps): bump actions/checkout from 4.1.1 to 4.1.4

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago
Labels: dependencies, patch, github_actions

#306 - Read Connection Timeout - Downloading Grype DB

Issue - State: open - Opened by saisatishkarra 7 months ago - 10 comments

#305 - chore(deps-dev): bump eslint from 8.57.0 to 9.1.1

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 2 comments
Labels: dependencies, major, javascript

GitHub / anchore/scan-action issues and pull requests