Issues

• Attempting to reuse fixed cache key means database cache is never updated unless Grype version changes

  anchore/scan-action#778 · Filter by author rvesse opened on Oct 6, 2026

• An unset severity-cutoff should default to the value of fail-on-severity if there is a configuration

  enhancementgood first issue
  anchore/scan-action#674 · Filter by author aebrahim opened on May 20, 2026
  1

• Support wildcards in sbom input

  enhancementgood first issue
  anchore/scan-action#673 · Filter by author Zentheon opened on May 19, 2026
  1

• No snap error while trying to initiate scan-action

  bug
  anchore/scan-action#542 · Filter by author theincognitogeek opened on Nov 7, 2025
  2

• "No vulnerabilities found" message when using only-fixed: true

  good first issue
  anchore/scan-action#527 · Filter by author chrisbloe opened on Oct 8, 2025

• Closing/dismissing alerts

  enhancement
  anchore/scan-action#504 · Filter by author klippx opened on Aug 13, 2025
  4

• Fails if runners are on arm64 (?)

  anchore/scan-action#503 · Filter by author madchap opened on Aug 12, 2025
  2

• Consider signposting anchorectl for enterprise customers

  anchore/scan-action#424 · Filter by author popey opened on Jan 15, 2025
  3

• Support template format

  good first issue
  anchore/scan-action#397 · Filter by author acouch opened on Oct 25, 2024
  4

• BUG - fail-build behavior takes on severity-cutoff unintentionally

  buggood first issue
  anchore/scan-action#378 · Filter by author RLI-Rdeaton opened on Oct 2, 2024
  10

• Distroless warnings

  anchore/scan-action#361 · Filter by author Kalovelo opened on Aug 28, 2024
  1

• Having the action report only certain level of vulnerabilities and above

  enhancement
  anchore/scan-action#321 · Filter by author pantelis-karamolegkos opened on May 27, 2024
  2

• Read Connection Timeout - Downloading Grype DB

  anchore/scan-action#306 · Filter by author saisatishkarra opened on Apr 23, 2024
  10

• Annotations support

  anchore/scan-action#244 · Filter by author MPV opened on Oct 30, 2023
  3

• False positives?

  anchore/scan-action#242 · Filter by author michelesr opened on Oct 19, 2023

• Getting unauthorised for github container registry

  anchore/scan-action#232 · Filter by author Sabreen-Parveen opened on Jun 28, 2023
  2

• Unpatched vulnerabilities are still printed with "suppressed"

  anchore/scan-action#214 · Filter by author jacopolanzonidev opened on Feb 17, 2023
  3

• Automatic feedback of scan results as PR comment

  enhancementgood first issue
  anchore/scan-action#162 · Filter by author harmw opened on Apr 6, 2022
  12

• Integrate GitHub security dismissed findings with Grype ignores

  enhancement
  anchore/scan-action#142 · Filter by author bryopsida opened on Feb 24, 2022
  1

• Update documentation how to continue on failure

  documentation
  anchore/scan-action#128 · Filter by author kzantow opened on Oct 5, 2021
  3

• Automatically upload SARIF report to Github

  enhancement
  anchore/scan-action#113 · Filter by author kzantow opened on Aug 20, 2021

• Migrate codebase to TypeScript

  enhancement
  anchore/scan-action#105 · Filter by author kzantow opened on Aug 16, 2021