All pull requests

Pull requests

• chore: keep default catalogers out of CreateSBOMConfig.Create

  #5564·avalcepina opened Nov 12, 2026·4 tasks done·

  ·

• chore: download snaps with net/http instead of go-getter

  dependencies
  #5563·avalcepina opened Nov 12, 2026·4 tasks done·

  ·

• feat(executable): add CycloneDX output for ELF build IDs

  #5561·davmatjo opened Nov 11, 2026·4 tasks done·

  ·

• feat(rust): allow excluding development dependencies from SBOM

  #5560·jblestang opened Nov 11, 2026·5 tasks done·

  ·

• fix(binary): identify Python runtimes in macOS frameworks and dylibs

  #5559·Rudra184 opened Nov 11, 2026·2 of 4 tasks·

  ·
  1

• Fix Bun binary version picked from embedded historical text

  #5558·sarankumar1325 opened Nov 11, 2026·4 tasks done·

  ·
  1

• Fix Go stdlib version for binaries built with hyphenated GOEXPERIMENT suffix

  #5557·sarankumar1325 opened Nov 10, 2026·4 tasks done·

  ·
  1

• fixed windows node.exe wrong cpe vendor , fixed #5555

  #5556·rezmoss opened Nov 10, 2026Contributor·4 of 9 tasks·

  ·
  1

  1

• fix(binary): do not report libavcodec API versions as ffmpeg versions

  #5552·Rudra184 opened Nov 10, 2026·4 tasks done·

  ·
  1

• fix(kernel): keep a module parameter's type and description

  #5547·mgkvibez opened Nov 9, 2026·

  ·
  1

• fix(javascript): keep pnpm lockfile documents that contain runtime entries

  #5546·PhuocOng opened Nov 8, 2026·4 tasks done·

  ·
  1

• fix: keep SPDX license refs unique regardless of case

  #5545·theluckystrike opened Nov 8, 2026·

  ·
  1

• chore(deps): update anchore dependencies

  automationchangelog-ignoredependencies
  #5535·anchore-oss-update-bot opened Nov 6, 2026Contributor·

  ·
  8

• fixed python-package-cataloger misses pip requirement files in requir…

  #5531·rezmoss opened Nov 5, 2026Contributor·4 of 9 tasks·

  ·
  1

• fix(spdx): qualify decoded package IDs with the document namespace

  #5526·santhiprakash opened Nov 5, 2026·4 tasks done·

  ·
  1

• fix(java): correct purl namespace for hibernate-commons-annotations

  #5524·Shanmukh-l33t opened Nov 4, 2026·4 tasks done·

  ·
  1

• Fix acceptance test image cache never restored in CI

  needs-manual-review
  #5523·Shanmukh-l33t opened Nov 4, 2026·4 of 9 tasks·

  ·

• feat: improve OCaml opam cataloging

  #5518·bn-d opened Nov 3, 2026·1 of 9 tasks·

  ·

• fixed pe-binary-package-cataloger reports php ext dlls , fixed #5516

  #5517·rezmoss opened Nov 3, 2026Contributor·4 of 9 tasks·

  ·
  1

• perf: reduce cataloger task selection work per CreateSBOM call

  #5515·caleballen opened Nov 3, 2026·4 tasks done·

  ·

• fix: build the out-of-range FileMode test cases at run time

  #5512·vejeta opened Nov 3, 2026·

  ·

• fix: catalog buildscript and settings gradle lockfiles

  #5511·wils0ns opened Nov 2, 2026·4 tasks done·

  ·

• fix(source): respect --source-version latest for container images

  #5508·LiShuochen opened Nov 1, 2026·4 tasks done·

  ·
  1

• fix(rust): omit Cargo PURLs for local packages in audit binaries

  #5507·soufiane-bouchaara opened Oct 31, 2026·3 of 4 tasks·

  ·

• fix: deterministic dev-only detection for yarn.lock and bun.lock

  #5506·mikey923 opened Oct 31, 2026·4 tasks done·

  ·
  1