github anchore/syft v0.39.3

latest releases: v1.16.0, v1.15.0, v1.14.2...
2 years ago

Changelog

v0.39.3 (2022-02-26)

Full Changelog

Added Features

  • Allow for CPE strings that can later be sanitized [PR #844] [wagoodman]
  • Ability to sign or attest the generated SBOM [Issue #510]

Bug Fixes

  • Resolve symlinks when fetching file contents [PR #782] [wagoodman]
  • Add exception for handlebars java package to generate nodejs CPE [PR #837] [wagoodman]
  • Do not generate empty CPEs for non-compliant CPE fields [PR #850] [spiffcs]
  • unable to catalog dpkg package=/var/lib/dpkg/status [Issue #733]
  • Deduplicate docker image manifests [Issue #825]
  • scan crash with panic: runtime error: index out of range [1] with length 1 when parsing invalid formatted requirements.txt file [Issue #831]

Don't miss a new syft release

NewReleases is sending notifications on new releases.