github anchore/syft v0.97.0

latest releases: v1.16.0, v1.15.0, v1.14.2...
12 months ago

Added Features

  • Add license for golang stdlib package [#2317 @coheigea]
  • Fall back to searching maven central using groupIDFromJavaMetadata [#2295 @coheigea]

Bug Fixes

  • Refine license search from groupIDFromJavaMetadata to account for artfactId in the groupId [#2313 @coheigea]
  • capture content written to stdout outside of report [#2324 @kzantow]
  • add manual groupid mappings for org.apache.velocity jars [#2327 @westonsteimel]
  • skip maven bundle plugin logic if vendor id and symbolic name match [#2326 @westonsteimel]
  • cataloger dpkg-db-cataloger not working [#2323]

Breaking Changes

Additional Changes

  • Export syft-json format package metadata type helper [#2328 @wagoodman]
  • Add dotnet-portable-executable-cataloger to README [#2322 @noqcks]

(Full Changelog)

Don't miss a new syft release

NewReleases is sending notifications on new releases.