Changelog

v0.46.1 (2022-05-16)

Bug Fixes

• Fix Cyclone-DX output so only valid enum values are produced. Add integration tests to cover validation. [PR #967] [Christopher Phillips]

Full Changelog

Changelog

v0.46.0 (2022-05-12)

Full Changelog

Added Features

• Support format SBOM conversion [Issue #563]
• .NET Core-Support [Issue #726]
• Support attaching attestation right after generate it [Issue #990]

Bug Fixes

• Fix github-json output option [PR #967] [StevenMaude]
• Clearing Go main module version makes creating a CycloneDX 1.3 JSON document difficult [Issue #959]
• WARN golang cataloger: failed to read buildinfo [Issue #978]

Changelog

v0.45.1 (2022-05-03)

Full Changelog

Bug Fixes

• reduce noise of log output at the info level [PR #976] [luhring]
• fix Illegal character encoding in CylconeDX-XML. [Issue #918]
• update golang crypto library dependency [Issue #972]

Changelog

v0.45.0 (2022-04-29)

Full Changelog

Added Features

• Preserve package IDs on Syft JSON SBOM decode [PR #963] [wagoodman]
• refactor command package to remove globals and add dependency injection [PR #965] [spiffcs]

Bug Fixes

• Decoding of sparse CycloneDX does not set language [Issue #953]

Changelog

v0.44.1 (2022-04-15)

Full Changelog

Bug Fixes

• Invalid SPDXID (contains an underscore) [Issue #949]
• Invalid SPDXID (contains a slash) [Issue #952]

Changelog

v0.44.0 (2022-04-12)

Full Changelog

Added Features

• Detect Java Namespaces/Group IDs by hash [Issue #887]
• Add additional Vendors for Springframework [PR #947 ]

Changelog

v0.43.2 (2022-04-06)

Full Changelog

Bug Fixes

• Pulls from private DockerHub repo fails with 0.43.0 when working with 0.42.4 [Issue #936]

Changelog

v0.43.0 (2022-03-31)

Full Changelog

Added Features

• Add dart support [PR #919] [ericlarssen-wf]
• Add list of supported package managers or catalogers to the README for simpler reference [Issue #913]

Bug Fixes

• Pull from DockerHub fails for public images when using SSO [PR #928] [wagoodman]
• Panic in DirectoryResolver indexPath due to null info parameter [Issue #872]

Changelog

v0.42.4 (2022-03-24)

Full Changelog

Bug Fixes

• Fix panic on empty sbom [PR #917] [luhring]
• bump strset version to fix 386 builds [PR #911] [wagoodman]

Changelog

v0.42.3 (2022-03-23)

Full Changelog

Bug Fixes

• Less verbose logging in Golang Cataloger [PR #904] [jonasagx]

Changelog

v0.42.2 (2022-03-22)

Full Changelog

Added Features

• Improve docker config support [PR #906] [wagoodman]

Changelog

v0.42.1 (2022-03-21)

Full Changelog

Bug Fixes

• Fix CycloneDX license decoding [PR #898] [kzantow]
• Fix image cleanup when there is an error [PR #905] [wagoodman]
• Omit H1Digest when empty [PR #902] [jonasagx]

Changelog

v0.42.0 (2022-03-17)

Full Changelog

Added Features

• Capture additional go 1.18 based binary information [Issue #718] [jonasagx]

Bug Fixes

• Fix panic when CycloneDX BOM missing metadata.component [#895] [kzantow]

Changelog

v0.41.6 (2022-03-16)

Full Changelog

Bug Fixes

• Fix panic parsing CycloneDX [PR #892] [kzantow]

Changelog

v0.41.5 (2022-03-15)

Full Changelog

Bug Fixes

• NPM PURLs are invalid [PR #832] [houdini91]

Changelog

v0.41.4 (2022-03-11)

Full Changelog

Added Features

• Support Yarn v3 [PR #868] [cipher-ardvark]
• Update to CycloneDX 1.4 [Issue #744] [samj1912]

Bug Fixes

• Correct CycloneDX distro decoding, test relationships [PR #745] [kzantow]
• RPM Epoch should be optional in the json schema [PR #880] [wagoodman]
• syft packages fails to catalog golang binary's modules for binary built with vendored modules [Issue #871] [fg-j]

Changelog

v0.41.1 (2022-03-08)

Full Changelog

Bug Fixes

• Fix file creation for output options [PR #875] [wagoodman]

Changelog

v0.41.0 (2022-03-07)

Full Changelog

Added Features

• Add platform selection [PR #866] [wagoodman]

Bug Fixes

• Include root path in directory resolve index [PR #869] [wagoodman]

Changelog

v0.40.1 (2022-03-04)

Full Changelog

Bug Fixes

• Correct SPDX-JSON checksum algorithm [PR #863] [kzantow]

Changelog

v0.40.0 (2022-03-02)

Full Changelog

Added Features

• Add support for multiple CPEs in CycloneDX [Issue #818]
• Use syft property namespace in CycloneDX [Issue #842]

Bug Fixes

• Wrong digest used for in-toto statement subject when using Docker daemon source [Issue #855]