anchore/syft v1.42.0

on GitHub

Added Features

• Add support for scanning GGUF models from OCI registries [#4335 @spiffcs]
• yarn lockfile scan doesnt catch dev dependencies [#4548 #4549 @rezmoss]

Additional Changes

• CPE detection for APK libavif to use aomedia vendor [#4597 @naag]

(Full Changelog)