Search results

Binary catalogers load full ELF symbol tables for every executable — excessive allocations for non-matching files

Status: Open.

#4777 In anchore/syft;

· slashben opened on Apr 15, 2026

File resolver indexes all files regardless of cataloger relevance — high baseline memory overhead

Status: Open.

#4776 In anchore/syft;

· slashben opened on Apr 15, 2026

OS package (deb) components duplicated as pypi components

bugSomething isn't workingSomething isn't working

good-first-issueGood for newcomersGood for newcomers

Status: Open.

#4760 In anchore/syft;

· bwt-sloanj opened on Apr 10, 2026

Syft does not use parent pom.xml for license detection if MANIFEST.MF contains Bundle-License

bugSomething isn't workingSomething isn't working

Status: Open.

#4747 In anchore/syft;

· Walnussbaer opened on Apr 7, 2026

Incorrect CPE for .NET Runtime?

bugSomething isn't workingSomething isn't working

good-first-issueGood for newcomersGood for newcomers

Status: Open.

#4738 In anchore/syft;

· catsburg opened on Apr 3, 2026

javascript.include-dev-dependencies does not appear to work for pnpm-lock.yaml

bugSomething isn't workingSomething isn't working

Status: Open.

#4734 In anchore/syft;

· xnox opened on Apr 2, 2026

not showing expat CVEs from syft generated sbom

bugSomething isn't workingSomething isn't working

good-first-issueGood for newcomersGood for newcomers

Status: Open.

#4771 In anchore/syft;

· d3matt opened on Mar 31, 2026

Compressed kernel modules are not scanned by the linux-kernel-cataloger

bugSomething isn't workingSomething isn't working

good-first-issueGood for newcomersGood for newcomers

Status: Open.

#4721 In anchore/syft;

· youennlj-sfl opened on Mar 31, 2026

CycloneDX BOM contains invalid externalReferences URL from unresolved Ruby gemspec interpolation (e.g. #{s.name})

bugSomething isn't workingSomething isn't working

good-first-issueGood for newcomersGood for newcomers

Status: Open.

#4720 In anchore/syft;

· milad-a-j opened on Mar 31, 2026

squashfs breaks with godisk-fs 1.8.0

bugSomething isn't workingSomething isn't working

Status: Open.

#4718 In anchore/syft;

· sgaist opened on Mar 30, 2026

syft creates a wrong CPE for libpcap

bugSomething isn't workingSomething isn't working

Status: Open.

#4712 In anchore/syft;

· alor opened on Mar 27, 2026

fix parsing of debian/copyright files

bugSomething isn't workingSomething isn't working

good-first-issueGood for newcomersGood for newcomers

Status: Open.

#4708 In anchore/syft;

· tmuehlbacher-bnr opened on Mar 27, 2026