github anchore/syft v1.54.1

6 hours ago

Bug Fixes

  • resolve packages.lock dependencies deterministically [PR #5210 @spiffcs]
  • Cannot produce attestation file from local podman image [Issue #1664] [PR #5368 @Bru456]

Dependencies

9 dependency changes (9 updated).

Updated (9 packages)
  • github.com/anchore/go-rpmdb v0.2.0 → v0.2.2
  • github.com/anchore/stereoscope v0.3.3 → v0.3.4
  • github.com/docker/cli v29.8.1+incompatible → v29.8.2+incompatible
  • github.com/glebarez/go-sqlite v1.20.3 → v1.23.0
  • github.com/klauspost/compress v1.20.0 → v1.20.1
  • github.com/secure-systems-lab/go-securesystemslib v0.11.0 → v0.11.1
  • github.com/sigstore/protobuf-specs v0.5.1 → v0.5.2
  • github.com/sigstore/sigstore v1.10.8 → v1.10.11
  • github.com/sylabs/sif/v2 v2.24.1 → v2.24.2

(Full Changelog)

Don't miss a new syft release

NewReleases is sending notifications on new releases.