# August 15th | Open Source Gardening | Live Stream

**URL:** <https://anchorecommunity.discourse.group/t/august-15th-open-source-gardening-live-stream/73>\
**Category:** Announcements\
**Created:** [August 15, 2024, 5:00pm UTC](https://anchorecommunity.discourse.group/t/august-15th-open-source-gardening-live-stream/73 "2024-08-15T17:00:43Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![popey](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/popey/32/429_2.png) [@popey](https://anchorecommunity.discourse.group/u/popey)\
**Post date:** [August 15, 2024, 5:00pm UTC](https://anchorecommunity.discourse.group/t/august-15th-open-source-gardening-live-stream/73/1 "2024-08-15T17:00:43Z")

</div>

August 15th | Open Source Gardening | Live Stream

Every Thursday, the Anchore Open Source team runs a [live stream](https://www.youtube.com/watch?v=m0wG_LQUhPo) to discuss issues, pull requests and future planning in our SBOM and vulnerability tools.

⏰ Starts at 2024-08-15T19:00:00Z for about an hour.

Expect engineering and project management discussions, a bit of GitHub issue gardening on [Syft](https://github.com/anchore/syft), [Grype](https://github.com/anchore/grype), and the rest of the [family](https://github.com/anchore).

Join us today for a relaxed, educational and productive live stream.

[![](https://global.discourse-cdn.com/free1/uploads/anchorecommunity/original/1X/f3628ecb485ef0304989c43b8b562eaed4c1161a.jpeg "15th August | Open Source Gardening | Live with Anchore Devs") ](https://www.youtube.com/watch?v=m0wG_LQUhPo)

# Topics

This week we are planning to talk about the issues marked ‘needs-discussion’ in [syft](https://github.com/anchore/syft/issues?q=is%3Aopen+is%3Aissue+label%3Aneeds-discussion+sort%3Aupdated-desc) and [grype](https://github.com/anchore/grype/issues?q=is%3Aopen+is%3Aissue+label%3Aneeds-discussion+sort%3Aupdated-desc)

Plus anything else we have time for, and your questions.

---

<div class="post-metadata">

**Author:** ![popey](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/popey/32/429_2.png) [@popey](https://anchorecommunity.discourse.group/u/popey)\
**Post date:** [August 15, 2024, 7:56pm UTC](https://anchorecommunity.discourse.group/t/august-15th-open-source-gardening-live-stream/73/2 "2024-08-15T19:56:34Z")

</div>

We ended up discussing the following issues:

## Syft

- [Missing dependency relationships between direct dependencies and transient dependencies in NPM packages · Issue #3109 · anchore/syft · GitHub](https://github.com/anchore/syft/issues/3109)
- [Wrong CPEs generated for OpenSSL by dotnet cataloguer · Issue #3120 · anchore/syft · GitHub](https://github.com/anchore/syft/issues/3120)
- [Support generating sbom for specific pnpm workspace packages · Issue #2574 · anchore/syft · GitHub](https://github.com/anchore/syft/issues/2574)
- [Dependency graph of BOMs generated with Syft is incomplete due to missing root node · Issue #3071 · anchore/syft · GitHub](https://github.com/anchore/syft/issues/3071)

## Grype

- [Filter output by severity · Issue #2006 · anchore/grype · GitHub](https://github.com/anchore/grype/issues/2006) - discussion continuing at [How can we make Grype's output more focused?](https://anchorecommunity.discourse.group/t/how-can-we-make-grypes-output-more-focused/57)

We then rolled the 🎲 and picked up a few for a brief discussion.

- [Add option to exclude packages introduced from a base layer · Issue #1809 · anchore/syft · GitHub](https://github.com/anchore/syft/issues/1809)
- [Automatic feedback of scan results as PR comment · Issue #162 · anchore/scan-action · GitHub](https://github.com/anchore/scan-action/issues/162)
- [False positive: GHSA-ggxm-pgc9-g7fp (CVE-2021-31799) in SLES 15.5 · Issue #1893 · anchore/grype · GitHub](https://github.com/anchore/grype/issues/1893)

---

<div class="post-metadata">

**Author:** ![popey](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/popey/32/429_2.png) [@popey](https://anchorecommunity.discourse.group/u/popey)\
**Post date:** [January 16, 2025, 5:32pm UTC](https://anchorecommunity.discourse.group/t/august-15th-open-source-gardening-live-stream/73/3 "2025-01-16T17:32:41Z")

</div>