v0.54.0

Release notes for syft v0.54.0

Release Notes

Version v0.54.0

v0.54.0 (2022-08-17)

Full Changelog

Added Features

  • Assume :latest tag implicitly [Issue #411]
  • Add ‘rpm modularity’ to rpm records generated by syft [Issue #1145]

Bug Fixes

  • Empty metadata while decoding should be allowed [PR #1154] [wagoodman]
  • Add PHP Composer dev dependencies [Issue #773]
  • opaque error when scanning an image in github registry [Issue #790]
  • javascript-lock-cataloger not detect and parse yarn.lock file [Issue #798]
  • Distro identification fails for dir: scheme when identityFiles not in scope. [Issue #814]
  • podman report not working [Issue #893]
  • Parsing yarn.lock fails to identify the currect package and version combinations [Issue #925]
  • gemspecs going unreported [Issue #960]
  • json SPDX invalid format [Issue #992]
  • Docker configuration issue on release [Issue #1126]
  • Can’t configure off-by-default cataloger without using –all [Issue #1141]
Last modified October 10, 2025: fix reference links (1594d93)