All pull requests

Pull requests

• fix: compare numbered short prereleases before final releases

  #3790·djahandarie opened Oct 12, 2026·

  ·

• fix(rpm): suppress false positives from Oracle Linux FIPS advisories

  #3789·lekanjava opened Oct 11, 2026·4 tasks done·

  ·
  1

• feat: fall back to the OS release SUPPORT_END date for EOL warnings

  #3787·tomersein opened Oct 11, 2026Contributor·

  ·
  1

  

• Add --fail-on no-vex-statement for matches without a VEX statement

  #3786·bhaskargurram-ai opened Oct 11, 2026·

  ·
  1

• Add risk score thresholds to --fail-on

  #3785·bhaskargurram-ai opened Oct 11, 2026·

  ·
  1

• fix(db/diff): report a package's vulnerability as added or removed only when its affected record set changes

  #3784·jspilman opened Oct 10, 2026Member·

  ·

• fix(rpm): report the lowest overlapping AlmaLinux fix

  #3783·jspilman opened Oct 9, 2026Member·

  ·

• fix(db/diff): report additional version-range records for a package

  #3782·jspilman opened Oct 9, 2026Member·

  ·

• fix(db/diff): report fix date and kind changes under the package

  #3781·jspilman opened Oct 9, 2026Member·

  ·

• fix: compare CPython CPE versions using Python ordering

  #3776·BarakStout opened Oct 9, 2026·3 tasks done·

  ·
  1

• fix: enforce fail-on-missing-fix-date for unaffected package rows

  bug
  #3775·wagoodman opened Oct 9, 2026Contributor·

  ·
  

• ci(scorecards): bump scorecard-action to v2.4.4

  needs-manual-review
  #3771·maxnze1 opened Oct 6, 2026·

  ·

• feat: search rules for data-driven distro matching customization and lookup

  #3751·kzantow opened Sep 29, 2026Contributor·

  ·
  15

  

• Reject output templates without Go template actions

  #3745·bIackr0se opened Sep 26, 2026Contributor·

  ·
  1

• Fix Amazon Linux kernel advisories matching hosts on other kernel lines

  #3729·arielbatkilin-creator opened Sep 23, 2026·

  ·

• Fix CycloneDX tool provenance in Grype output

  #3728·bIackr0se opened Sep 23, 2026Contributor·

  ·

• fix: support shorthand java versions with #u#

  #3726·kzantow opened Sep 22, 2026Contributor·

  ·

• fix: search Swift packages by their repository path

  #3713·az-catch opened Sep 18, 2026·

  ·
  1

• fix(csafvex): support summary and details CSAF note categories in csafvex transformer

  #3710·Tyagiquamar opened Sep 13, 2026·

  ·
  2

• fix(template): make vulnerability DB details collapsible in HTML report

  #3708·shashankvarma499 opened Sep 12, 2026·

  ·
  1

• fix(search): skip unparseable fix versions instead of reporting as fixed

  #3707·simpleqt opened Sep 11, 2026·

  ·
  1

• fix: buffer Enumerate channel to prevent goroutine leak on early exit

  #3706·simpleqt opened Sep 11, 2026·

  ·
  1

• add option to skip KEV, EPSS and CWE metadata enrichment for library callers

  #3693·dmcg310 opened Sep 7, 2026·5 tasks done·

  ·

• test: assert the --by-cve merge survivor is not order-dependent

  #3692·Dashtid opened Sep 5, 2026Contributor·

  ·
  1

• fix: normalize apk package fallback versions for CPE matching

  #3687·sueun-dev opened Sep 3, 2026·

  ·