Will Murphy

It looks like `as` is also not renamed: ``` c // example.c int main() { int as = 23; return 0; } ``` ``` rust // example.rs fn main() {...

> It's coming from the glob import on diesel::types::*. diesel::types::ops is not internal, it's public API. we just need a more scoped import. I'd like to work on this but...

Hi @kenlavbah ! Thanks for reporting this issue. I'm no longer able to reproduce this: ``` mkdir jenkins && cd jenkins && npm init -y && npm i @backstage/plugin-jenkins &&...

Added `changelog-ignore` because this was fixed in `0.60.0` and so shouldn't be included in the current release's release notes.

Thanks @kingjs10 for reporting this issue. I'm going to see what parts of it can still be reproduced, since several false positives are reported. ``` grype --platform linux/amd64 \ opensearchproject/logstash-oss-with-opensearch-output-plugin:latest@sha256:dc060b364d600858fca6b86f9217bdd0c28ecbc5c1a0636538dd6d946422a421...

Taking the second question first, let's try to see what flavor of Linux this logstash image is based on: ``` docker run --platform linux/amd64 -ti \ opensearchproject/logstash-oss-with-opensearch-output-plugin:latest@sha256:dc060b364d600858fca6b86f9217bdd0c28ecbc5c1a0636538dd6d946422a421 \ cat /etc/os-release...

The nokogiri one is interesting; I'm not sure what to make of it. Running: ``` grype -o json opensearchproject/logstash-oss-with-opensearch-output-plugin > /tmp/grype816.json cat grype816.json| grype explain --id CVE-2019-5477 ``` Prints: [0000]...

@kaniini I'm interested in picking up this work, but I'm not sure I have enough context to start implementing right away. Could you or @joshbressers help me understand: > Packages...

Reading through https://wiki.alpinelinux.org/wiki/Apk_spec#Installed_Database_V2, it looks like we can check for lines that start with `s:`: > s: - repository tag, optional, this will be set if the package is tagged...

Hi @Mzyxptlk, thanks for reporting this. Here is a quick repro snippet: ``` mkdir pydocker && cd pydocker && echo 'docker==5.0.3' > requirements.txt && grype dir:. ``` which produces output...