Release v1.10.0 · anchore/syft (github.com)
Added Features
- Detect go main module from partial package builds #3060 @wagoodman
- Support traefik in linux/arm/v6, linux/riscv64 #3038 #3077 @witchcraze
- Catalog TiDB binary #2763
- Generate a Maven friendly CPE #3042 #3045 @kzantow
Bug Fixes
- Only match ldflag version if it matches the main module or targets main.version #3062 @LaurentGoderre
- python requirements.txt cataloger: allow dots in python package names #3070 @Mikcl
- SPDX output performance with many relationships #3053 @kzantow
- Order CPEs deterministically for SBOM reproducibility #2967 #3085 @kzantow
- Python packages: name normalization #3064 #3069 @Mikcl
- Syft report panics with the golang cataloger #3037 #3043 @willmurphyscode