v0.91.0
Release notes for syft v0.91.0
Categories:
Release Notes
Version v0.91.0
Added Features
- Add support for CycloneDX 1.5 [#2120 #2123 @spiffcs]
- Add support for containerd as an image source [#201 #1793 @shanedell]
- Support cataloging github workflow & github action usages [#1896 #2140 @wagoodman]
Bug Fixes
- Allow CycloneDX json input with no components [#2127 @ahoz]
- Prevent errors from clobbering terminal [#2161 @kzantow]
- Using syft as a go library to decode a syft json has incomplete data [#2069 #2083 @kzantow]
- SBOMs are not the same on multiple runs of syft [#1944]
Additional Changes
- Switch to stdlib’s slices pkg [#2148 @hainenber]
- Remove unneeded arch switch in unit test [#2156 @willmurphyscode]
- Update chronicle to v0.8.0 [#2154 @wagoodman]
- Update to latest stereoscope [#2151 @spiffcs]
- Pin workflow checkout for cpe update-cpe-dictionary-index [#2141 @spiffcs]
- Add dependency information to conan lockfile parser [#2131 @Pro]
- Pin and update all workflow dependencies; add permission scopes [#2138 @spiffcs]
- Enforce race detector [#2122 @willmurphyscode]