October 17th | Open Source Gardening | Live Stream

Announcements
,
1

:wave: Hello everyone!

Every Thursday, the Anchore Open Source team runs a live stream to discuss issues, pull requests and future planning in our SBOM and vulnerability tools.

:alarm_clock: Starts at 2024-10-17T19:00:00Z for about an hour.

Expect engineering and project management discussions, a bit of GitHub issue gardening on Syft, Grype, and the rest of the family.

Join us today for a relaxed, educational and productive live stream.

If you’d like to join us on the Zoom call to discuss any relevant topics, DM me right here in Discourse for the link.

Topics

  • Updates - If there’s any important news about the tools, we’ll usually start there.
  • Needs discussion - issues and pull requests marked ‘needs-discussion’.
  • Any other issues or pulls that need our collective brains :brain:
  • Questions from the audience :thinking:

Here’s some handy repo-specific links:

  • ND = Marked “Needs discussion”
  • Open = All other issues and PRs that are open

(number is quantity at time of posting)

Project Issues (ND) PRs (ND) Issues (Open) PRs (Open)
syft :link: 16 :link: 0 :link: 361 :link: 30
grype :link: 12 :link: 0 :link: 254 :link: 17
grant :link: 0 :link: 0 :link: 16 :link: 1
sbom-action :link: 0 :link: 0 :link: 11 :link: 3
scan-action :link: 0 :link: 0 :link: 17 :link: 2
grype-db :link: 0 :link: 0 :link: 12 :link: 3
vunnel :link: 0 :link: 0 :link: 27 :link: 6
quill :link: 0 :link: 0 :link: 12 :link: 13
2

@popey I wanted to bring How to act on go-module vulnerabilities? up as a discussion topic. It’s labeled as discuss but that doesn’t make it automatically show up in the post here.

1 Like
3

This we discussed this week: