Update module github.com/anchore/syft to v0.60.1 (#962)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/anchore/syft](https://togithub.com/anchore/syft) | require
| patch | `v0.60.0` -> `v0.60.1` |

---

### Release Notes

<details>
<summary>anchore/syft</summary>

### [`v0.60.1`](https://togithub.com/anchore/syft/releases/tag/v0.60.1)

[Compare
Source](https://togithub.com/anchore/syft/compare/v0.60.0...v0.60.1)

### Changelog

#### [v0.60.1](https://togithub.com/anchore/syft/tree/v0.60.1)
(2022-11-01)

[Full
Changelog](https://togithub.com/anchore/syft/compare/v0.59.0...v0.60.1)

##### Added Features

- Remove the docker installation from the release process \[[Issue
#&#8203;577](https://togithub.com/anchore/syft/issues/577)]
- Include go binary h1 digests in SPDX \[[Issue
#&#8203;1261](https://togithub.com/anchore/syft/issues/1261)]

##### Bug Fixes

- A malformed Python RECORD file stops Syft processing \[[Issue
#&#8203;1012](https://togithub.com/anchore/syft/issues/1012)]
- Deprecated SPDX license (GFDL\* and BSD-2-Clause-NetBSD) \[[Issue
#&#8203;1179](https://togithub.com/anchore/syft/issues/1179)]
- Update SPDX license list to 3.18 \[[Issue
#&#8203;1245](https://togithub.com/anchore/syft/issues/1245)]
- Versions not printed out properly from maven pom.xml \[[Issue
#&#8203;1251](https://togithub.com/anchore/syft/issues/1251)]
- syft attest --output cyclonedx-json incompatible with cosign \[[Issue
#&#8203;1268](https://togithub.com/anchore/syft/issues/1268)]
- Create SBOM file will have suffix in modules name \[[Issue
#&#8203;1275](https://togithub.com/anchore/syft/issues/1275)]

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://app.renovatebot.com/dashboard#github/defenseunicorns/zarf).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC4xMi4wIiwidXBkYXRlZEluVmVyIjoiMzQuMTIuMCJ9-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

go.mod

@@ -6,7 +6,7 @@ require (
 	github.com/AlecAivazis/survey/v2 v2.3.6
 	github.com/alecthomas/jsonschema v0.0.0-20220216202328-9eeeec9d044b
 	github.com/anchore/stereoscope v0.0.0-20221006201143-d24c9d626b33
-	github.com/anchore/syft v0.60.0
+	github.com/anchore/syft v0.60.1
 	github.com/derailed/k9s v0.26.7
 	github.com/distribution/distribution/v3 v3.0.0-20220612151901-b5e2f3f33dbc
 	github.com/fatih/color v1.13.0

go.sum

@@ -324,6 +324,8 @@ github.com/anchore/syft v0.59.0 h1:rGq200rPTC+4AGJKhm9ajj60dmlCgcHAxtVflNLtL/Y=
 github.com/anchore/syft v0.59.0/go.mod h1:s5Rrt0yt4rQfQVKyH3rXszanIhyrjx37KEtynHdUCh0=
 github.com/anchore/syft v0.60.0 h1:bVx46MdSCcvnVqlRQP/L3IWKl8etC7FZ3LcBIDRQXXA=
 github.com/anchore/syft v0.60.0/go.mod h1:liCRoNZiQeiZeafaptjizcr/V7+ZAEYra/RhwqKldgw=
+github.com/anchore/syft v0.60.1 h1:QEmdjhIHWSlOc7t96j1Det6ZwivoTOKC+YCTpZeZlJU=
+github.com/anchore/syft v0.60.1/go.mod h1:liCRoNZiQeiZeafaptjizcr/V7+ZAEYra/RhwqKldgw=
 github.com/andreyvit/diff v0.0.0-20170406064948-c7f18ee00883/go.mod h1:rCTlJbsFo29Kk6CurOXKm700vrz8f0KW0JNfpkRJY/8=
 github.com/andybalholm/brotli v1.0.1/go.mod h1:loMXtMfwqflxFJPmdbJO0a3KNoPuLBgiu3qAvBg8x/Y=
 github.com/andybalholm/brotli v1.0.2/go.mod h1:loMXtMfwqflxFJPmdbJO0a3KNoPuLBgiu3qAvBg8x/Y=