# November 21st | Open Source Gardening | Live Stream

**URL:** <https://anchorecommunity.discourse.group/t/november-21st-open-source-gardening-live-stream/247>\
**Category:** Announcements\
**Tags:** video, gardening\
**Created:** [November 21, 2024, 5:53pm UTC](https://anchorecommunity.discourse.group/t/november-21st-open-source-gardening-live-stream/247 "2024-11-21T17:53:17Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![popey](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/popey/32/429_2.png) [@popey](https://anchorecommunity.discourse.group/u/popey)\
**Post date:** [November 21, 2024, 5:53pm UTC](https://anchorecommunity.discourse.group/t/november-21st-open-source-gardening-live-stream/247/1 "2024-11-21T17:53:17Z")

</div>

👋 Hello everyone!

Almost every Thursday, the Anchore Open Source team runs a [live stream](https://www.youtube.com/watch?v=hCRtnsHmSDg) to discuss issues, pull requests and future [planning](https://github.com/orgs/anchore/projects/22/views/14) in our [SBOM](https://anchore.com/sbom/what-is-an-sbom/) and [vulnerability](https://anchore.com/container-vulnerability-scanning/) tools.

⏰ Starts at 2024-11-21T20:00:00Z for about an hour.

Expect engineering and project management discussions, a bit of GitHub issue gardening on [Syft](https://github.com/anchore/syft), [Grype](https://github.com/anchore/grype), and the rest of the [family](https://github.com/anchore).

Join us today for a relaxed, educational ~~and~~  ~~spooky~~ live stream.

[![](https://global.discourse-cdn.com/free1/uploads/anchorecommunity/original/1X/f3628ecb485ef0304989c43b8b562eaed4c1161a.jpeg "21st November | Open Source Gardening | Live with Anchore Devs") ](https://www.youtube.com/watch?v=hCRtnsHmSDg)

If you’d like to join us on the Zoom call to discuss any relevant topics, DM me right [here](https://anchorecommunity.discourse.group/chat/c/popey/4) in Discourse for the link.

## Topics

- Updates - If there’s any important news about the tools, we’ll usually start there.
- Needs discussion - issues and pull requests marked ‘[needs-discussion](https://github.com/search?q=org%3Aanchore+label%3Aneeds-discussion&type=issues&s=updated&o=desc)’.
- Any other issues or pulls that need our collective brains 🧠
- Questions from the audience 🤔

Here’s some handy repo-specific links:

- ND = Marked “Needs discussion”
- Open = All other issues and PRs that are open

(number is quantity at time of posting)

| Project | Issues (ND) | PRs (ND) | Issues (Open) | PRs (Open) |
| --- | --- | --- | --- | --- |
| [syft](https://github.com/anchore/syft) | [🔗 15](https://github.com/anchore/syft/issues?q=is%3Aopen+is%3Aissue+label%3Aneeds-discussion+sort%3Aupdated-desc) | [🔗 0](https://github.com/anchore/syft/pulls?q=is%3Aopen+is%3Apr+label%3Aneeds-discussion+sort%3Aupdated-desc) | [🔗 379](https://github.com/anchore/syft/issues?q=is%3Aopen+is%3Aissue+sort%3Aupdated-desc) | [🔗 40](https://github.com/anchore/syft/pulls?q=is%3Aopen+is%3Apr+sort%3Aupdated-desc) |
| [grype](https://github.com/anchore/grype) | [🔗 13](https://github.com/anchore/grype/issues?q=is%3Aopen+is%3Aissue+label%3Aneeds-discussion+sort%3Aupdated-desc) | [🔗 0](https://github.com/anchore/grype/pulls?q=is%3Aopen+is%3Apr+label%3Aneeds-discussion+sort%3Aupdated-desc) | [🔗 268](https://github.com/anchore/grype/issues?q=is%3Aopen+is%3Aissue+sort%3Aupdated-desc) | [🔗 15](https://github.com/anchore/grype/pulls?q=is%3Aopen+is%3Apr+sort%3Aupdated-desc) |
| [grant](https://github.com/anchore/grant) | [🔗 0](https://github.com/anchore/grant/issues?q=is%3Aopen+is%3Aissue+label%3Aneeds-discussion+sort%3Aupdated-desc) | [🔗 0](https://github.com/anchore/grant/pulls?q=is%3Aopen+is%3Apr+label%3Aneeds-discussion+sort%3Aupdated-desc) | [🔗 18](https://github.com/anchore/grant/issues?q=is%3Aopen+is%3Aissue+sort%3Aupdated-desc) | [🔗 0](https://github.com/anchore/grant/pulls?q=is%3Aopen+is%3Apr+sort%3Aupdated-desc) |
| [sbom-action](https://github.com/anchore/sbom-action) | [🔗 0](https://github.com/anchore/sbom-action/issues?q=is%3Aopen+is%3Aissue+label%3Aneeds-discussion+sort%3Aupdated-desc) | [🔗 0](https://github.com/anchore/sbom-action/pulls?q=is%3Aopen+is%3Apr+label%3Aneeds-discussion+sort%3Aupdated-desc) | [🔗 12](https://github.com/anchore/sbom-action/issues?q=is%3Aopen+is%3Aissue+sort%3Aupdated-desc) | [🔗 3](https://github.com/anchore/sbom-action/pulls?q=is%3Aopen+is%3Apr+sort%3Aupdated-desc) |
| [scan-action](https://github.com/anchore/scan-action) | [🔗 0](https://github.com/anchore/scan-action/issues?q=is%3Aopen+is%3Aissue+label%3Aneeds-discussion+sort%3Aupdated-desc) | [🔗 0](https://github.com/anchore/scan-action/pulls?q=is%3Aopen+is%3Apr+label%3Aneeds-discussion+sort%3Aupdated-desc) | [🔗 18](https://github.com/anchore/scan-action/issues?q=is%3Aopen+is%3Aissue+sort%3Aupdated-desc) | [🔗 2](https://github.com/anchore/scan-action/pulls?q=is%3Aopen+is%3Apr+sort%3Aupdated-desc) |
| [grype-db](https://github.com/anchore/grype-db) | [🔗 0](https://github.com/anchore/grype-db/issues?q=is%3Aopen+is%3Aissue+label%3Aneeds-discussion+sort%3Aupdated-desc) | [🔗 0](https://github.com/anchore/grype-db/pulls?q=is%3Aopen+is%3Apr+label%3Aneeds-discussion+sort%3Aupdated-desc) | [🔗 13](https://github.com/anchore/grype-db/issues?q=is%3Aopen+is%3Aissue+sort%3Aupdated-desc) | [🔗 7](https://github.com/anchore/grype-db/pulls?q=is%3Aopen+is%3Apr+sort%3Aupdated-desc) |
| [vunnel](https://github.com/anchore/vunnel) | [🔗 0](https://github.com/anchore/vunnel/issues?q=is%3Aopen+is%3Aissue+label%3Aneeds-discussion+sort%3Aupdated-desc) | [🔗 0](https://github.com/anchore/vunnel/pulls?q=is%3Aopen+is%3Apr+label%3Aneeds-discussion+sort%3Aupdated-desc) | [🔗 29](https://github.com/anchore/vunnel/issues?q=is%3Aopen+is%3Aissue+sort%3Aupdated-desc) | [🔗 10](https://github.com/anchore/vunnel/pulls?q=is%3Aopen+is%3Apr+sort%3Aupdated-desc) |
| [quill](https://github.com/anchore/quill) | [🔗 0](https://github.com/anchore/quill/issues?q=is%3Aopen+is%3Aissue+label%3Aneeds-discussion+sort%3Aupdated-desc) | [🔗 0](https://github.com/anchore/quill/pulls?q=is%3Aopen+is%3Apr+label%3Aneeds-discussion+sort%3Aupdated-desc) | [🔗 12](https://github.com/anchore/quill/issues?q=is%3Aopen+is%3Aissue+sort%3Aupdated-desc) | [🔗 4](https://github.com/anchore/quill/pulls?q=is%3Aopen+is%3Apr+sort%3Aupdated-desc) |

---

<div class="post-metadata">

**Author:** ![popey](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/popey/32/429_2.png) [@popey](https://anchorecommunity.discourse.group/u/popey)\
**Post date:** [November 21, 2024, 9:03pm UTC](https://anchorecommunity.discourse.group/t/november-21st-open-source-gardening-live-stream/247/2 "2024-11-21T21:03:06Z")

</div>

This week we mentioned:

- A reminder of the [deprecation](https://anchorecommunity.discourse.group/t/grype-versions-before-v0-12-1-may-2021-will-stop-getting-new-vulnerability-data-on-20-november-2024/91/2) of older database formats
- The new releases of [Syft](https://github.com/anchore/syft/releases) and [Grype](https://github.com/anchore/grype/releases) today.

These issues:

- 00:06 - [SBOM cataloger silently discards CycloneDX components of other types than library/application · Issue #3447 · anchore/syft · GitHub](https://github.com/anchore/syft/issues/3447)
- 00:33 - [Grype should expand `~` in paths in config file · Issue #2024 · anchore/grype · GitHub](https://github.com/anchore/grype/issues/2024)
  - Sidebar: [GitHub - mitchellh/go-homedir: Go library for detecting and expanding the user's home directory without cgo.](https://github.com/mitchellh/go-homedir)

- 00:43 - [[Request] Ability to customize top level metadata · Issue #3397 · anchore/syft · GitHub](https://github.com/anchore/syft/issues/3397)
- 00:44 - [Should we combine the grype and grype-db projects? · Issue #1409 · anchore/grype · GitHub](https://github.com/anchore/grype/issues/1409)

No gardening next week, as most of the team will be away for Thanksgiving 🦃🇺🇸

---

<div class="post-metadata">

**Author:** ![TimBrown1611](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/timbrown1611/32/223_2.png) [@TimBrown1611](https://anchorecommunity.discourse.group/u/TimBrown1611)\
**Post date:** [November 21, 2024, 9:25pm UTC](https://anchorecommunity.discourse.group/t/november-21st-open-source-gardening-live-stream/247/3 "2024-11-21T21:25:13Z")

</div>

hello!  
can you please add this PR to the next gardening?

> <https://github.com/anchore/syft/pull/3138>
>
> This PR tries to solve the squash-with-all-layer resolver issue, aligned to the …newest version of syft.
> Please let me know how to proceed further, I guess the solution here is not perfect, but it does knows how to handle deleted packages.
> 
> part of - https://github.com/anchore/syft/issues/15

some of the question raised in this PR is waiting for clarifications 🙂

---

<div class="post-metadata">

**Author:** ![popey](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/popey/32/429_2.png) [@popey](https://anchorecommunity.discourse.group/u/popey)\
**Post date:** [January 16, 2025, 5:32pm UTC](https://anchorecommunity.discourse.group/t/november-21st-open-source-gardening-live-stream/247/4 "2025-01-16T17:32:07Z")

</div>


