# December 5th | Open Source Gardening | Live Stream

**URL:** <https://anchorecommunity.discourse.group/t/december-5th-open-source-gardening-live-stream/263>\
**Category:** Announcements\
**Tags:** video, gardening\
**Created:** [December 3, 2024, 4:33pm UTC](https://anchorecommunity.discourse.group/t/december-5th-open-source-gardening-live-stream/263 "2024-12-03T16:33:37Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![popey](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/popey/32/429_2.png) [@popey](https://anchorecommunity.discourse.group/u/popey)\
**Post date:** [December 3, 2024, 4:33pm UTC](https://anchorecommunity.discourse.group/t/december-5th-open-source-gardening-live-stream/263/1 "2024-12-03T16:33:37Z")

</div>

## Anchore OSS Community Live Stream

Every Thursday, the Anchore Open Source team runs a [live stream](https://www.youtube.com/watch?v=JBGcxqmjWFA) to discuss issues, pull requests and future planning in our SBOM and vulnerability tools.

⏰ [Stream](https://www.youtube.com/watch?v=JBGcxqmjWFA) begins at 2024-12-05T20:00:00Z for about an hour.

Expect engineering and project management discussions, a bit of GitHub issue gardening on [Syft](https://github.com/anchore/syft), [Grype](https://github.com/anchore/grype), and the rest of the [family](https://github.com/anchore).

Join us on Thursday for a relaxed, educational and productive live stream.

[![](https://global.discourse-cdn.com/free1/uploads/anchorecommunity/original/1X/f3628ecb485ef0304989c43b8b562eaed4c1161a.jpeg "5th December | Open Source Gardening | Live with Anchore Devs") ](https://www.youtube.com/watch?v=JBGcxqmjWFA)

If you’d like to join us on the Zoom call to discuss any relevant topics, DM me right [here](https://anchorecommunity.discourse.group/chat/c/popey/4) in Discourse for the link.

## Topics

- Updates - If there’s any important news about the tools, we’ll usually start there.
- Needs discussion - issues and pull requests marked [needs-discussion](https://github.com/search?q=org%3Aanchore+label%3Aneeds-discussion&type=issues&s=updated&o=desc).
- Any other issues or pulls that need our collective brains 🧠
- Questions from the audience 🤔

---

<div class="post-metadata">

**Author:** ![TimBrown1611](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/timbrown1611/32/223_2.png) [@TimBrown1611](https://anchorecommunity.discourse.group/u/TimBrown1611)\
**Post date:** [December 3, 2024, 5:39pm UTC](https://anchorecommunity.discourse.group/t/december-5th-open-source-gardening-live-stream/263/2 "2024-12-03T17:39:54Z")

</div>

hi!  
kind reminder i would like to know how to proceed further with the PR of squash-with-all-layers 🙂

some open question was asked there

> <https://github.com/anchore/syft/pull/3138>
>
> This PR tries to solve the squash-with-all-layer resolver issue, aligned to the …newest version of syft.
> Please let me know how to proceed further, I guess the solution here is not perfect, but it does knows how to handle deleted packages.
> 
> part of - https://github.com/anchore/syft/issues/15

thanks!

---

<div class="post-metadata">

**Author:** ![TimBrown1611](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/timbrown1611/32/223_2.png) [@TimBrown1611](https://anchorecommunity.discourse.group/u/TimBrown1611)\
**Post date:** [December 4, 2024, 9:26am UTC](https://anchorecommunity.discourse.group/t/december-5th-open-source-gardening-live-stream/263/3 "2024-12-04T09:26:51Z")

</div>

hi!  
this PR is also waiting for a discussion 🙂

> <https://github.com/anchore/grype/pull/2271>
>
> closes - https://github.com/anchore/grype/issues/2264
> 
> this PR aims to remove …unrelated fixed versions to make the results more focus in grype.

would be great to know how to proceed further!

---

<div class="post-metadata">

**Author:** ![popey](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/popey/32/429_2.png) [@popey](https://anchorecommunity.discourse.group/u/popey)\
**Post date:** [December 5, 2024, 9:05pm UTC](https://anchorecommunity.discourse.group/t/december-5th-open-source-gardening-live-stream/263/4 "2024-12-05T21:05:41Z")

</div>

## Things we discussed

PSA: [Grype versions before v0.51.0 (Oct 2022) will stop getting new vulnerability data on 25 January 2025](https://anchorecommunity.discourse.group/t/grype-versions-before-v0-51-0-oct-2022-will-stop-getting-new-vulnerability-data-on-25-january-2025/254)

## Community Issues & PRs

- [00:04](https://www.youtube.com/watch?v=JBGcxqmjWFA&t=4m00s) - [Include the OS Information available in the SBOM model in the SPDX reports by josegomezr · Pull Request #3462 · anchore/syft · GitHub](https://github.com/anchore/syft/pull/3462)
- [00:23](https://www.youtube.com/watch?v=JBGcxqmjWFA&t=24m00s) - [Show suggested fixed version when there are multiple listed · Issue #2264 · anchore/grype · GitHub](https://github.com/anchore/grype/issues/2264)
- [00:40](https://www.youtube.com/watch?v=JBGcxqmjWFA&t=40m00s) - [Setting `file.metadata.selection` to `none` still results in files in the SBOM · Issue #2989 · anchore/syft · GitHub](https://github.com/anchore/syft/issues/2989)

---

<div class="post-metadata">

**Author:** ![popey](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/popey/32/429_2.png) [@popey](https://anchorecommunity.discourse.group/u/popey)\
**Post date:** [January 16, 2025, 5:32pm UTC](https://anchorecommunity.discourse.group/t/december-5th-open-source-gardening-live-stream/263/5 "2025-01-16T17:32:07Z")

</div>


