All pull requests

Pull requests

• Don't let one caller's cancellation abort a shared Syft run

  #1906·Suneel Freimuth (suneel-ms) opened Oct 31, 2026·

  ·
  3

• Require Experimental detectors to have an ExperimentalConfiguration

  #1896·Ryan Brandenburg (ryanbrandenburg) opened Oct 14, 2026Contributor·

  ·
  1

• MSBuildBinaryLog: Retrieve inner assets files for multi-target project

  #1891·Julien Lebosquain (MrJul) opened Oct 9, 2026·

  ·
  7

• Update Valleysoft.DockerfileModel to 2.0.0 for heredoc support

  #1887·Dan Cristoloveanu (dcristoloveanu) opened Oct 1, 2026·

  ·
  1

  4

• Quote manifest path when invoking cargo metadata

  #1870·RKS (rksharma-owg) opened Sep 17, 2026Contributor·

  ·
  1

  1

• Ignore link and file versions in Pnpm 6 package dependencies

  #1869·RKS (rksharma-owg) opened Sep 17, 2026Contributor·

  ·
  1

  2

• Exclude editable root packages when scanning uv lockfile

  #1868·RKS (rksharma-owg) opened Sep 17, 2026Contributor·

  ·
  1

  6

• Allow DefaultOff detectors to be filtered and run exclusively

  #1867·RKS (rksharma-owg) opened Sep 17, 2026Contributor·

  ·
  1

  1

• Add OSV Scanner config for test fixtures

  #1862·el kampu (elkampu) opened Sep 4, 2026·

  ·
  1

  1

• Use DTO for uv.lock parsing

  #1851·Ryan Brandenburg (ryanbrandenburg) opened Jul 23, 2026Contributor·

  ·
  10

• Reduce Default Telemetry Output

  #1842·Fernando Rojo (FernandoRojo) opened Jul 10, 2026Contributor·

  ·
  59

• Bump cryptography from 46.0.5 to 48.0.1 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/roots

  dependenciespython
  #1830·dependabot[bot] opened Jun 19, 2026Bot·

  ·
  1

• Bump pyjwt from 2.8.0 to 2.13.0 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/roots

  dependenciespython
  #1828·dependabot[bot] opened Jun 16, 2026Bot·

  ·
  1

• Bump pyjwt from 2.10.1 to 2.13.0 in /test/Microsoft.ComponentDetection.VerificationTests/resources/uv

  dependenciespython:uv
  #1827·dependabot[bot] opened Jun 16, 2026Bot·

  ·
  1

• Bump idna from 3.7 to 3.15 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/parallel/parallel-test-3

  dependenciespython
  #1824·dependabot[bot] opened Jun 9, 2026Bot·

  ·
  1

• Bump rand from 0.8.4 to 0.8.6 in /test/Microsoft.ComponentDetection.VerificationTests/resources/rust/workspaces

  dependenciesrust
  #1823·dependabot[bot] opened Jun 9, 2026Bot·

  ·
  1

• Promote the DockerfileComponentDetector to default

  #1820·Julian (jpinz) opened Jun 5, 2026Member·

  ·
  3

  

• Promote the DockerCompose, Dockerfile, and Helm detectors to default on.

  #1818·Julian (jpinz) opened Jun 4, 2026Member·

  ·
  4

  

• Update actions/upload-artifact action to v7.0.2

  #1817·renovate[bot] opened Jun 2, 2026Bot·1 task·

  ·
  17

• Update actions/checkout action to v6.1.0

  #1816·renovate[bot] opened Jun 2, 2026Bot·1 task·

  ·
  17

• Bump idna from 3.7 to 3.15 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/parallel/parallel-test-4

  dependenciespython
  #1814·dependabot[bot] opened May 20, 2026Bot·

  ·
  1

• Bump idna from 3.10 to 3.15 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/roots

  dependenciespython
  #1813·dependabot[bot] opened May 19, 2026Bot·

  ·
  1

• Bump idna from 3.10 to 3.15 in /test/Microsoft.ComponentDetection.VerificationTests/resources/uv

  dependenciespython:uv
  #1812·dependabot[bot] opened May 19, 2026Bot·

  ·
  1

• Bump urllib3 from 2.6.3 to 2.7.0 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/parallel/parallel-test-2

  dependenciespython
  #1811·dependabot[bot] opened May 12, 2026Bot·

  ·
  1

• Bump urllib3 from 2.6.3 to 2.7.0 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/roots

  dependenciespython
  #1810·dependabot[bot] opened May 12, 2026Bot·

  ·
  1