anchore/syft v0.96.0

on GitHub

Added Features

• Check maven central as well for licenses in parents poms for nested jars [#2302 @coheigea]
• store image annotations inside the SBOM [#2267 #2294 @noqcks]
• Support parsing license information in Maven projects via parent poms [#2103]

Bug Fixes

• SPDX file has duplicate sha256 tag in versionInfo [#2300 @coheigea]
• Report virtual path consistently between file.Resolvers [#1836 #2287 @wagoodman]
• Unable to identify CycloneDX JSON documents without $schema property [#2299 #2303 @kzantow]

(Full Changelog)