All pull requests

Pull requests

• Report each failure to Sentry once, and respect the classification

  #448·vpetersson-bot opened Oct 9, 2026Contributor·

  ·
  2

• build(deps): pin the uv image to the version the lockfile now holds

  #447·vpetersson-bot opened Oct 8, 2026Contributor·

  ·

• build(deps): bump the uv group with 7 updates

  dependenciespython:uv
  #446·dependabot[bot] opened Oct 7, 2026Bot·

  ·

• build(deps): bump the github-actions group across 1 directory with 2 updates

  dependenciesgithub_actions
  #440·dependabot[bot] opened Sep 30, 2026Bot·

  ·

• Write purl references that SPDX 2.2 accepts

  #438·aurangzaib048 opened Sep 28, 2026Contributor·

  ·
  10

• Show the server's reason when an upload refusal is not JSON

  #437·aurangzaib048 opened Sep 28, 2026Contributor·

  ·
  8

• Validate Yocto documents before upload and fix the purls we inject

  #436·aurangzaib048 opened Sep 28, 2026Contributor·

  ·
  5

• Report SPDX 2.3 from the converting generators as 2.3

  #435·aurangzaib048 opened Sep 28, 2026Contributor·

  ·
  8

• Accept SPDX 3.0 patch releases above 3.0.1

  #434·aurangzaib048 opened Sep 28, 2026Contributor·

  ·
  9

• Validate CycloneDX 1.2 output against its schema

  #433·aurangzaib048 opened Sep 28, 2026Contributor·

  ·
  9

• Stop reporting a non-SBOM file as CycloneDX

  #432·aurangzaib048 opened Sep 28, 2026Contributor·

  ·
  3

• Stop the generator priority test depending on installed tools

  #431·aurangzaib048 opened Sep 28, 2026Contributor·

  ·
  6

• fix(licences): a licence value the parser chokes on no longer ends the run

  #430·vpetersson-bot opened Sep 25, 2026Contributor·

  ·
  15

• Stop asking a package registry about PURLs we invented

  #416·aurangzaib048 opened Sep 16, 2026Contributor·

  ·
  7

• Give the container a writable HOME, and pin what it fetches

  #396·vpetersson-bot opened Aug 29, 2026Contributor·

  ·
  9

• fix(wizard): prefer is_default_workspace, keep reading the old name

  #389·aurangzaib048 opened Aug 26, 2026Contributor·

  ·
  4

• feat(hbom): allow release tagging for non-SBOM artifacts, and document HBOM

  #336·aurangzaib048 opened Aug 5, 2026Contributor·

  ·
  3

  4

• feat: optional CBOM generation via cdxgen, plus CBOM pipeline recipes

  #300·aurangzaib048 opened Jul 22, 2026Contributor·

  ·
  2

  43

• feat(wizard): add Publish step — generate & upload first SBOMs locally

  #281·vpetersson opened Jul 16, 2026Contributor·

  ·
  8

• Consume Docker Hub upstream SBOMs and merge with Syft

  #225·vpetersson opened Apr 24, 2026Contributor·10 of 11 tasks·

  ·
  5

• feat: TEA (Transparency Exchange API) integration

  #186·aurangzaib048 opened Mar 6, 2026Contributor·4 tasks done·

  ·
  75