v0.64.0

Release notes for syft v0.64.0

Release Notes

Version v0.64.0

v0.64.0 (2022-12-23)

Full Changelog

Added Features

  • License parsing for Java [PR #1385]
  • Integration or association of binary and package [Issue #1411]
  • Include go.sum h1 digest information in checksums [Issue #1277]

Bug Fixes

  • Clean package names found in python catalogers [PR #1417] [wagoodman]
  • FilesAnalyzed wrong and missing SHA1 for files [Issue #1396]
  • Binary executables identified as “library” type in CycloneDX [Issue #1402]
  • Excessive “unable to read golang buildinfo error=not a Go executable file” warnings in versions after v0.62.1 [Issue #1403]
  • Binary java detection [Issue #1410]
Last modified October 10, 2025: fix reference links (1594d93)