Keith Zantow comments

Results 505 comments of


                                            Keith Zantow

Enable the Scorecard Github Action and badge

Thanks for the contribution @joycebrum -- we're going to move forward with this as-is and work to make incremental improvements 👍

Grype inconsistence output squashed and all-layers representation

This should be corrected in the latest Grype release - v0.59.0, please let us know if it is not!

Show all vulnerabilities, even suppressed

This sounds like a great addition! We would like the default behavior to remain the same but we absolutely accept PRs for things like this!

Show all vulnerabilities, even suppressed

@vimalpatel19 that would be great! I'd suggest maybe we think about adding `(suppressed)` to the `SEVERITY` column as opposed to installed or fixed-in.

Show all vulnerabilities, even suppressed

@vimalpatel19 yeah, something like that... maybe the flag could be `--show-suppressed` or `--include-suppressed`?

Show all vulnerabilities, even suppressed

Just to make sure this issue is updated with the same info as the PR: https://github.com/anchore/grype/pull/966#issuecomment-1291100638 I think we should just update the table to include this 👍

Scanning individual layer produces partial results when extracted

Hi @leoncider sorry for the delay here -- currently, there are 2 different modes which Syft operates: _container_ scan or _directory_ scan, these have a different set of catalogers that...

Support accessing individual CPE fields from templates

I wonder if we could surface some helper functions in the template instead for this, what do you think?

No dependency graph relationships reported in CycloneDX output

Indeed, this could be a nice enhancement -- PRs are welcome! :)

Support for Conan lockfiles

Hi @EstebanDugueperoux2, I created this issue to from your comment on #1083. When looking at this feature, it states: > This is an experimental feature subject to breaking changes in...