Michael Kesper

Use fakeroot instead of requiring root

3

Hi, I think it should it be possible to use https://wiki.debian.org/FakeRoot instead of requiring root for building. Building kernels as root is strongly discouraged.

Python3 compatibility

2

Hi, would it be feasible to include Python3 compatibility (through 2to3 at least). Installing via pip breaks in Py3: print name + ': ' + cfg.get('_ldap', name) ``` ^ ```...

Trivy does not scan software not added by package manager

1

## Description When scanning containers, trivy does not scan for software not added by package managers. ## What did you expect to happen? `trivy image --list-all-pkgs --format json -o temurin.json...

Ensure upload of images actually succeeds

1

Whether the upload is using curl as right now or the method proposed in #119, it should always check that there were no errors. Right now, the result of the...

Terminal Emulation Applications

1

PowerShell as a Terminal Emulation Application? How does this compare to konsole etc.? "KiTTY is a fork from version 0.67 of PuTTY, the best telnet / SSH client in the...

Offer verifyable cryptographic signature for checksum.txt

2

**What happened**: I checked the Releases page. No signature of the checksum file was found and no link to a way of checking its integrity. **What you expected to happen**:...

Include package URL purl in grype cyclonedx output

1

**What would you like to be added**: Grype CycloneDX output should include "purl" package URL information which is already present in syft output. **Why is this needed**: To give other...

Grype does not scan software not added by package manager

2

**What happened**: No java executable was found when scanning docker image eclipse-temurin:11.0.14_9-jre-alpine **What you expected to happen**: syft should recognize executables even [when added via tar](https://github.com/adoptium/containers/blob/5a7c9b25bbca1cde27828e819f765614f7daf774/11/jdk/alpine/Dockerfile.releases.full) **How to reproduce it...

Document using underlying kubectl configuration

1

##### SUMMARY When using e.g. openshift, it's possible to have clients preauthenticated without a kubeconfig. If trying to use the module without that config file, it will fail with: "Failed...

**What happened**: Built an updated debian image with fixes for zlib1g from bullseye-security. **What you expected to happen**: Grype should recognize that zlib 1:1.2.11.dfsg-2+deb11u2 contains a fix for CVE-2022-37434 as...