`github.com/anchore/syft`

Ecosystem:
go

Package URL:
pkg:golang/github.com/anchore/syft

Total PRs:
419 Dependabot PRs

Latest PR:
6 days ago

Unique Repositories:
53 repositories

Unique Repos (30 days):
1 repository

Security Advisories

Syft improper temporary file cleanup

GHSA-rjcw-vg7j-m9rc CVE-2026-33481 MODERATE published 3 months ago • updated 12 days ago

### Impact Syft versions before v1.42.3 would not properly cleanup temporary storage if the temporary storage was exhausted during a scan. When sca...

Credential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set

GHSA-jp7v-3587-2956 CVE-2023-24827 MODERATE published over 3 years ago • updated 11 days ago

A password disclosure flaw was found in Syft versions v0.69.0 and v0.69.1. This flaw leaks the password stored in the SYFT_ATTEST_PASSWORD environm...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump the go-modules group with 2 updates

paketo-buildpacks/poetry #524

1.34.0 → 1.34.2 Patch PR

Merged 8 months ago

Bump the go-modules group with 2 updates

paketo-buildpacks/pipenv-install #546

1.34.0 → 1.34.2 Patch PR

Merged 8 months ago

Bump the go-modules group with 2 updates

paketo-buildpacks/go-build #921

1.34.0 → 1.34.1 Patch PR

Merged 8 months ago

Bump the go-modules group with 5 updates

paketo-buildpacks/node-engine #1249

1.29.0 → 1.29.1 Patch PR

Merged 11 months ago

build(deps): bump github.com/anchore/syft from 1.29.0 to 1.29.1

wolfi-dev/wolfictl #1706

1.29.0 → 1.29.1 Patch PR

Open 11 months ago

Bump the go-modules group with 5 updates

paketo-buildpacks/cpython #964

1.29.0 → 1.29.1 Patch PR

Open 11 months ago

chore(deps): bump github.com/anchore/syft from 1.29.0 to 1.29.1

anchore/grant #233

1.29.0 → 1.29.1 Patch PR

Open 11 months ago

Bump the go-modules group with 5 updates

paketo-buildpacks/yarn-install #978

1.29.0 → 1.29.1 Patch PR

Open 11 months ago

Bump the go-modules group with 5 updates

paketo-buildpacks/yarn #827

1.29.0 → 1.29.1 Patch PR

Merged 11 months ago

Bump the go-modules group with 5 updates

paketo-buildpacks/nginx #951

1.29.0 → 1.29.1 Patch PR

Merged 11 months ago

Bump the go-modules group with 5 updates

paketo-buildpacks/go-build #848

1.29.0 → 1.29.1 Patch PR

Merged 11 months ago

Bump github.com/anchore/syft from 1.29.0 to 1.29.1

paketo-buildpacks/packit #673

1.29.0 → 1.29.1 Patch PR

Merged 11 months ago

chore(deps): bump github.com/anchore/syft from 1.29.0 to 1.29.1

zarf-dev/zarf #4032

1.29.0 → 1.29.1 Patch PR

Open 11 months ago 1 comment

Bump the go-modules group with 5 updates

paketo-buildpacks/go-dist #1065

1.29.0 → 1.29.1 Patch PR

Merged 11 months ago

Bump the go-modules group with 5 updates

paketo-buildpacks/npm-install #959

1.29.0 → 1.29.1 Patch PR

Merged 11 months ago

Bump the go-modules group with 19 updates

paketo-buildpacks/go-mod-vendor #888

1.29.0 → 1.29.1 Patch PR

Merged 11 months ago

Bump the go-modules group with 5 updates

paketo-buildpacks/httpd #871

1.29.0 → 1.29.1 Patch PR

Merged 11 months ago

Bump github.com/anchore/syft from 1.27.0 to 1.27.1 in the go-modules group

paketo-buildpacks/npm-install #911

1.27.0 → 1.27.1 Patch PR

Merged about 1 year ago

chore(deps): bump github.com/anchore/syft from 1.27.0 to 1.27.1

anchore/grant #220

1.27.0 → 1.27.1 Patch PR

Merged about 1 year ago

Bump github.com/anchore/syft from 1.27.0 to 1.27.1 in the go-modules group

paketo-buildpacks/yarn-install #929

1.27.0 → 1.27.1 Patch PR

Merged about 1 year ago

Bump github.com/anchore/syft from 1.27.0 to 1.27.1 in the go-modules group

paketo-buildpacks/yarn #779

1.27.0 → 1.27.1 Patch PR

Merged about 1 year ago

Bump github.com/anchore/syft from 1.27.0 to 1.27.1

paketo-buildpacks/packit #655

1.27.0 → 1.27.1 Patch PR

Merged about 1 year ago

Bump github.com/anchore/syft from 1.27.0 to 1.27.1 in the go-modules group

paketo-buildpacks/node-engine #1196

1.27.0 → 1.27.1 Patch PR

Merged about 1 year ago

build(deps): bump github.com/anchore/syft from 1.27.0 to 1.27.1

wolfi-dev/wolfictl #1640

1.27.0 → 1.27.1 Patch PR

Merged about 1 year ago

Bump github.com/anchore/syft from 1.27.0 to 1.27.1 in the go-modules group

paketo-buildpacks/cpython #924

1.27.0 → 1.27.1 Patch PR

Open about 1 year ago

chore(deps): bump github.com/anchore/syft from 1.26.0 to 1.26.1

derailed/k9s #3382

1.26.0 → 1.26.1 Patch PR

Open about 1 year ago

chore(deps): bump github.com/anchore/syft from 1.26.0 to 1.26.1

zarf-dev/zarf #3857

1.26.0 → 1.26.1 Patch PR

Open about 1 year ago

Bump github.com/anchore/syft from 1.26.0 to 1.26.1

paketo-buildpacks/packit #652

1.26.0 → 1.26.1 Patch PR

Merged about 1 year ago

build(deps): bump github.com/anchore/syft from 1.26.0 to 1.26.1

docker/buildkit-syft-scanner #129

1.26.0 → 1.26.1 Patch PR

Open about 1 year ago

chore(deps): bump github.com/anchore/syft from 1.26.0 to 1.26.1

anchore/grype #2678

1.26.0 → 1.26.1 Patch PR

Merged about 1 year ago

Bump the go-modules group with 33 updates

paketo-buildpacks/cpython #903

1.26.0 → 1.26.1 Patch PR

Open about 1 year ago

Package Details

Name:	`github.com/anchore/syft`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/anchore/syft`
JSON API:	View JSON

Security Advisories

2

Active advisories

MODERATE 2

View All golang Advisories

Package Information

Description:

Repository:	https://github.com/anchore/syft
Homepage:	https://github.com/anchore/syft
Latest Release:	`v1.17.0` over 1 year ago
Dependent Repos:	179
Dependent Packages:	217
Ranking:	Top 0.4716% by dependent repos Top 0.3342% by dependent pkgs

PR Status

Open 109 (26.0%)

Merged 76 (18.1%)

Closed 214 (51.1%)

PR Types

Minor 313 (74.7%)

Patch 81 (19.3%)