v0.33.0

Changelog

v0.33.0 (2022-02-15)

Full Changelog

Added Features

• Add ability to merge matches [PR #602] [wagoodman]
• Allow for ingestion of SPDX SBOM documents as input [Issue #395]

Bug Fixes

• Grype stuck on some images [Issue #549]

v0.32.0

Changelog

v0.32.0 (2022-01-20)

Full Changelog

Features

• Upgrade Grype to latest version of syft. See full release for details.

Bug Fixes

• Error scanning SBOM from file: unsupported package metadata type: file [Issue #592]

Docker images

• docker pull anchore/grype:v0.32.0

v0.31.1

Changelog

v0.31.1 (2022-01-11)

Full Changelog

Added Features

• Update Containerd dependency to fix GHSA-mvff-h3cj-wj9c

Bug Fixes

• Grype installation contains vulnerability GHSA-mvff-h3cj-wj9c [Issue #583]

Docker images

• docker pull anchore/grype:v0.31.1

v0.30.0

Changelog

v0.30.0 (2022-01-09)

Full Changelog

Added Features

• Add search configuration [PR #579] [wagoodman]

Docker images

• docker pull anchore/grype:v0.30.0

v0.29.0

Changelog

v0.29.0 (2022-01-07)

Full Changelog

Added Features

• update syft to version v0.35.0

Bug Fixes

• ability to go install "github.com/anchore/grype" [Issue #568]

Docker images

• docker pull anchore/grype:v0.29.0

v0.28.0

Changelog

v0.28.0 (2021-12-22)

Full Changelog

Added Features

• Path filtering for file system scanning [Issue #389]
• Grype verbose log version [Issue #555]

Bug Fixes

• Java packages sometimes missing version information [Issue #504]
• False positives cases for CVE-2021-44228 [Issue #552]
• Error when scanning a single file (e.g. zip, war, etc.) and using JSON output format [Issue #554]
• MacOS install fails using GNU coreutils version of cp [Issue #560]

Docker images

• docker pull anchore/grype:v0.28.0

v0.27.3

Changelog

v0.27.3 (2021-12-16)

Full Changelog

Bug Fixes

• Panic when a package has been added to a catalog multiple times [Issue #548]

Docker images

• docker pull anchore/grype:v0.27.3

v0.27.2

Changelog

v0.27.2 (2021-12-14)

Full Changelog

Bug Fixes

• Index out of range while scanning Java webapps [Issue #538]

Docker images

• docker pull anchore/grype:v0.27.2

v0.27.1

Changelog

v0.27.1 (2021-12-14)

Full Changelog

Bug Fixes

• panic: runtime error: invalid memory address or nil pointer dereference (deb package parsing) [Issue #523]
• panic: runtime error: invalid memory address or nil pointer dereference (go binary parsing) [Issue #526]

Docker images

• docker pull anchore/grype:v0.27.1

v0.27.0

Changelog

v0.27.0 (2021-12-08)

Full Changelog

Added Features

• Adding AlmaLinux OS Support [PR #514] [srbala]

Docker images

• docker pull anchore/grype:v0.27.0