Issues

• Smoke Test Failure

  bug
  microsoft/component-detection#1886 · Filter by author github-actions opened on Oct 1, 2026

• Dockerfile detector logs an error on BuildKit heredoc Dockerfiles (Valleysoft.DockerfileModel pinned to 1.2.0, predates heredoc support)

  microsoft/component-detection#1878 · Filter by author dcristoloveanu opened on Sep 22, 2026

• Vcpkg dependencies detected via vcpkg.spdx.json but not attributed to vcpkg.json (Explicitly Referenced is 0, despite valid manifest-info.json)

  microsoft/component-detection#1865 · Filter by author derekpiasecki opened on Sep 14, 2026

• [Bug]: pnpm detector rejects multi-document lockfiles

  microsoft/component-detection#1864 · Filter by author PeterYangIO opened on Sep 12, 2026

• Request: Add Gradle build-script dependency detection using the Gradle dependency engine

  microsoft/component-detection#1859 · Filter by author felickz opened on Aug 21, 2026

• [Request] Detecting go.work files

  microsoft/component-detection#1856 · Filter by author eschcam opened on Aug 6, 2026

• Smoke Test Failure

  bug
  microsoft/component-detection#1848 · Filter by author github-actions opened on Jul 15, 2026
  1

• Smoke Test Failure

  bug
  microsoft/component-detection#1846 · Filter by author github-actions opened on Jul 14, 2026

• Smoke Test Failure

  bug
  microsoft/component-detection#1843 · Filter by author github-actions opened on Jul 13, 2026

• SVG icon

  microsoft/component-detection#1834 · Filter by author remcohaszing opened on Jun 28, 2026

• Component-detection 7.1.2 fails to start on MacOS

  microsoft/component-detection#1815 · Filter by author ycollet opened on May 20, 2026

• Smoke Test Failure

  bug
  microsoft/component-detection#1794 · Filter by author github-actions opened on Apr 20, 2026

• Smoke Test Failure

  bug
  microsoft/component-detection#1793 · Filter by author github-actions opened on Apr 20, 2026

• Smoke Test Failure

  bug
  microsoft/component-detection#1780 · Filter by author github-actions opened on Apr 13, 2026

• NpmComponentDetector unconditionally skips packages with engines.vscode, causing false negatives for products that ship built-in extensions

  microsoft/component-detection#1772 · Filter by author benvillalobos opened on Apr 8, 2026

• Smoke Test Failure

  bug
  microsoft/component-detection#1765 · Filter by author github-actions opened on Apr 6, 2026

• Smoke Test Failure

  bug
  microsoft/component-detection#1764 · Filter by author github-actions opened on Apr 6, 2026

• Smoke Test Failure

  bug
  microsoft/component-detection#1761 · Filter by author github-actions opened on Apr 3, 2026

• Service to centrally track and cleanup generated files in detectors

  type:feature
  Feature

  microsoft/component-detection#1758 · Filter by author zhenghao104 opened on Apr 2, 2026

• Smoke Test Failure

  bug
  microsoft/component-detection#1750 · Filter by author github-actions opened on Mar 30, 2026

• Distro release is included in LinuxComponent.Id but not Purl

  microsoft/component-detection#1714 · Filter by author alisonlomaka opened on Mar 13, 2026
  3

• Ruby gem versions don't follow pure semantic versioning

  microsoft/component-detection#1598 · Filter by author cwize1 opened on Dec 15, 2025

• Root package issue when scanning uv repository

  microsoft/component-detection#1586 · Filter by author lampham-nttdata opened on Dec 5, 2025

• Ivy scan fails when ivy.jar is missing

  microsoft/component-detection#1573 · Filter by author lampham-nttdata opened on Nov 26, 2025

• Pnpm 6 Detector should also ignore link: versions in package dependencies

  microsoft/component-detection#1555 · Filter by author dmichon-msft opened on Nov 22, 2025