Issues

• CSAF ingestion stores the document-local product ID as package name when a product_version leaf has no identification helper

  guacsec/trustify#2755 · Filter by author imh0st opened on Oct 12, 2026

• IPv4 support

  guacsec/trustify#2754 · Filter by author mhatzl opened on Oct 9, 2026
  6

• CSAF products defined in product_tree.full_product_names get no PURL status and no remediation links

  guacsec/trustify#2740 · Filter by author imh0st opened on Oct 6, 2026
  1

• CSAF remediations that use group_ids are stored without any product association

  guacsec/trustify#2738 · Filter by author imh0st opened on Oct 5, 2026

• RUSTSEC advisories that don't have a CVE don't show up in UI

  guacsec/trustify#2723 · Filter by author jonathanpallant opened on Sep 30, 2026
  3

• HTTP importer: adopt FetcherOptions::authentication once csaf-walker#90 is released

  guacsec/trustify#2694 · Filter by author ruromero opened on Sep 22, 2026

• Delta-based sync for KEV importer

  guacsec/trustify#2608 · Filter by author ctron opened on Aug 26, 2026
  1

• SBOM-level exploit summary

  guacsec/trustify#2607 · Filter by author ctron opened on Aug 26, 2026
  1

• Filter vulnerability list by exploit status

  guacsec/trustify#2606 · Filter by author ctron opened on Aug 26, 2026

• Add exploit format category and upload endpoint

  Task

  guacsec/trustify#2605 · Filter by author ctron opened on Aug 26, 2026

• Support CycloneDX 1.7 SBOM ingestion

  guacsec/trustify#2594 · Filter by author waldemar-kindler opened on Aug 22, 2026
  1

• Support hash/digest-based correlation for packages and vulnerabilities

  Vulnerability Correlation
  guacsec/trustify#2550 · Filter by author ctron opened on Jul 30, 2026

• running perf tests see some sql queries 'spilling to disk'

  guacsec/trustify#2502 · Filter by author rh-jfuller opened on Jul 14, 2026
  1

  

• Revert sequoia-openpgp version pin once build toolchain supports clang/bindgen

  guacsec/trustify#2490 · Filter by author ctron opened on Jul 10, 2026

• CI: Replace unmaintained redhat-actions (buildah-build, push-to-registry, oc-login)

  guacsec/trustify#2483 · Filter by author ctron opened on Jul 9, 2026
  1

• CI: Upgrade actions/github-script from v7 to v9 (Node 20 deprecated)

  guacsec/trustify#2480 · Filter by author ctron opened on Jul 9, 2026
  1

• Migrate all upstream container images to UBI10

  guacsec/trustify#2478 · Filter by author ctron opened on Jul 9, 2026

• RPM OS release suffix (el7/el8/el9) causes incorrect cross-OS vulnerability matching

  guacsec/trustify#2240 · Filter by author dejanb opened on Feb 10, 2026

• Default version should be 1, not 0, according to spec

  guacsec/trustify#2196 · Filter by author jcrossley3 opened on Jan 8, 2026
  1

• [Docs] Audit the Trustify documentation

  guacsec/trustify#2176 · Filter by author ritz303 opened on Dec 9, 2025
  4

• Feature Request: Notifications/Alerting

  enhancement
  guacsec/trustify#2108 · Filter by author maxthier opened on Nov 17, 2025
  1

• Consider dropping status table for a dedicated type (or enum)

  backport release/0.4.z
  Task

  guacsec/trustify#2095 · Filter by author ctron opened on Nov 7, 2025
  2

• Permission model

  enhancement
  Feature

  guacsec/trustify#2078 · Filter by author maxthier opened on Nov 4, 2025
  2

• Performance: Improve vulnerability correlation logic for SBOMs

  performanceVulnerability Correlation
  guacsec/trustify#2039 · Filter by author dejanb opened on Oct 16, 2025
  1

  

• Implement more generic vendor packages recommendations

  guacsec/trustify#2024 · Filter by author dejanb opened on Oct 9, 2025
  2