Will Murphy

@westonsteimel does that mean we should hold off on this type of change until the next release?

There's doubt about whether this is the right direction and it's not on top of the priority pile. We can revisit this if it comes up again.

This would be a big help. Concretely, it would allow us to add SLES [here](https://github.com/anchore/grype/blob/ef376037510cdb507af3567846ed1127f471255c/grype/pkg/package.go#L179-L184)

Hi @msmeissn thanks for checking in! There is not a lot of news. It was suggested on https://github.com/anchore/vunnel/pull/635 that we should switch to parsing CSAF rather than the unified fixed+unfixed...

Hi @msmeissn maybe you can help me understand some surprising data here: https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2015-8985.json has no entries for "SUSE Linux Enterprise Server 12 SP4", though it _does_ have entries for the...

Hi @ashu4 thanks for the question! I definitely owe an update here. ## TL;DR Not before March 2026, but I hope not too long after. ## Shorter answer I haven't...

Thanks for the ping @ashu4 ! This is still on my list, and less blocked than it was previously. I'm not able to commit to an exact timeline but have...