v0.60.1

Release notes for syft v0.60.1

Release Notes

Version v0.60.1

v0.60.1 (2022-11-01)

Full Changelog

Added Features

  • Remove the docker installation from the release process [Issue #577]
  • Include go binary h1 digests in SPDX [Issue #1261]

Bug Fixes

  • A malformed Python RECORD file stops Syft processing [Issue #1012]
  • Deprecated SPDX license (GFDL* and BSD-2-Clause-NetBSD) [Issue #1179]
  • Update SPDX license list to 3.18 [Issue #1245]
  • Versions not printed out properly from maven pom.xml [Issue #1251]
  • syft attest –output cyclonedx-json incompatible with cosign [Issue #1268]
  • Create SBOM file will have suffix in modules name [Issue #1275]
Last modified October 10, 2025: fix reference links (1594d93)