All issues

Search results

Support hash/digest-based correlation for packages and vulnerabilities

Vulnerability CorrelationCorrelation of vulnerabilities to Packages, SBOMs and ProductsCorrelation of vulnerabilities to Packages, SBOMs and Products

Status: Open.

#2550 In guacsec/trustify;

· ctron opened on Jul 30, 2026

Support known-exploited-vulnerability catalogs (CISA KEV) as an enrichment source

Status: Open.

#2545 In guacsec/trustify;

· waldemar-kindler opened on Jul 28, 2026

running perf tests see some sql queries 'spilling to disk'

Status: Open.

#2502 In guacsec/trustify;

· rh-jfuller opened on Jul 14, 2026

Revert sequoia-openpgp version pin once build toolchain supports clang/bindgen

Status: Open.

#2490 In guacsec/trustify;

· ctron opened on Jul 10, 2026

CI: Replace unmaintained redhat-actions (buildah-build, push-to-registry, oc-login)

Status: Open.

#2483 In guacsec/trustify;

· ctron opened on Jul 9, 2026

CI: Upgrade actions/github-script from v7 to v9 (Node 20 deprecated)

Status: Open.

#2480 In guacsec/trustify;

· ctron opened on Jul 9, 2026

Migrate all upstream container images to UBI10

Status: Open.

#2478 In guacsec/trustify;

· ctron opened on Jul 9, 2026

GET /api/v2/sbom returns inconsistent "total" after Deletion

Status: Open.

#2355 In guacsec/trustify;

· carlosthe19916 opened on May 7, 2026

RPM OS release suffix (el7/el8/el9) causes incorrect cross-OS vulnerability matching

Status: Open.

#2240 In guacsec/trustify;

· dejanb opened on Feb 10, 2026

Investigate moving to maintained CSAF library

Status: Open.

#2225 In guacsec/trustify;

· dejanb opened on Feb 3, 2026

Default version should be 1, not 0, according to spec

Status: Open.

#2196 In guacsec/trustify;

· jcrossley3 opened on Jan 8, 2026

[Docs] Audit the Trustify documentation

Status: Open.

#2176 In guacsec/trustify;

· ritz303 opened on Dec 9, 2025