February 27th | Open Source Gardening | Live Stream

[popey]

Hello everyone!

We’re back with Anchore Open Source team running a live stream to discuss issues, pull requests and future roadmap planning in our SBOM and vulnerability tools.

Starts at 2025-02-27T20:00:00Z for about an hour.

Expect engineering and project management discussions, a bit of GitHub issue gardening on Syft, Grype, and the rest of the family.

Join us today for a relaxed, educational and productive live stream.

27th February | Open Source Gardening | Live with Anchore Devs

Topics

• Issues - Open issues with “needs-discussion” label
• Pull Requests - Open PRs with “needs-discussion” label
• Discourse topics - Open topics from General Syft and Grype with few or no replies
• Questions from the audience

[popey]

Apologies, my audio was broken for the first 7 minutes of the stream.

Things we discussed

• Syft 1.20.0 is out
• Last week’s Community Spotlight: https://www.youtube.com/watch?v=cYuCIPpAAr4
• Upcoming Community Spotlight: Webinar Registration - Zoom

Grype DB Schema V6 is coming

• OSS · GitHub

Triage

• SBOM generation for Conanfile.py · Issue #3488 · anchore/syft · GitHub - “not a good first issue”
  • orbit/conanfile.py at main · google/orbit · GitHub
  • CuraEngine/conanfile.py at main · Ultimaker/CuraEngine · GitHub
  • conan info — conan 1.66.0 documentation
• Standalone Executables not listed in SBOM · Issue #3511 · anchore/syft · GitHub - Closed, fixed
• Windows sbom have strange % in purl/sbom-ref · Issue #3569 · anchore/syft · GitHub %%%
• syft scan gets Killed · Issue #3651 · anchore/syft · GitHub

Then I was stupid enough to actually try and run this “oom killing” scan. Which killed video capture for me.

Sorry about that, and well done SaurabhNair96 · GitHub