Labels

created or acted upon by a bot

dealing with management of binary tools via binny

Something isn't working

do not add a entry for this when generating the changelog

dealing with project dependencies

Improvements or additions to documentation

This issue or pull request already exists

New feature or request

Grype upload of SBOM information and pulling policy evaluations from Enterprise

Replace vulnerability matching in policy engine with grype calls

Syft upload of SBOM information into Enterprise

Upgrade the feed sync in policy engine to source vulnerability information from grype DB

Pull requests that update GitHub Actions code

Pull requests that update Go code

Good for newcomers

Extra attention is needed

This doesn't seem right

not for team triage - in the backlog for member to pick up and find error

automated action that should be reviewed by a human

high level epic that should be broken into smaller tasks

Important to Anchore's Platform Team

used when updated dependencies in preparation for release

Pull requests that update Python code

Further information is requested

relating to releases of DBs and the grype-db application

Relating to a potential security issue