Update module github.com/anchore/syft to v0.55.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github.com/anchore/syft	require	minor	v0.53.0 -> v0.55.0

---

Release Notes

anchore/syft

v0.55.0

Compare Source

Changelog

v0.55.0 (2022-08-29)

Full Changelog

Added Features

• Capture package.json private field for npm modules [Issue #​1160]
• add support for pnpm [Issue #​1165]

Bug Fixes

• Java-Cataloger produces empty entries for cyclonedx output [Issue #​466]
• No licenses included in scan with yarn.lock [Issue #​845]
• syft convert -o option erroring out [Issue #​1095]

v0.54.0

Compare Source

Changelog

v0.54.0 (2022-08-17)

Full Changelog

Added Features

• Assume :latest tag implicitly [Issue #​411]
• Add 'rpm modularity' to rpm records generated by syft [Issue #​1145]

Bug Fixes

• Empty metadata while decoding should be allowed [PR #​1154] [wagoodman]
• Add PHP Composer dev dependencies [Issue #​773]
• opaque error when scanning an image in github registry [Issue #​790]
• javascript-lock-cataloger not detect and parse yarn.lock file [Issue #​798]
• Distro identification fails for dir: scheme when identityFiles not in scope. [Issue #​814]
• podman report not working [Issue #​893]
• Parsing yarn.lock fails to identify the currect package and version combinations [Issue #​925]
• gemspecs going unreported [Issue #​960]
• json SPDX invalid format [Issue #​992]
• Docker configuration issue on release [Issue #​1126]
• Can't configure off-by-default cataloger without using --all [Issue #​1141]

v0.53.4

Compare Source

Changelog

v0.53.4 (2022-08-03)

Full Changelog

v0.53.3

Compare Source

Changelog

v0.53.3 (2022-08-03)

Full Changelog

Bug Fixes

• Deprecated SPDX license (GPL-2.0+) [Issue #​950]

v0.53.2

Compare Source

Changelog

v0.53.2 (2022-08-02)

Full Changelog

Bug Fixes

• Phantom release 0.53.0 [Issue #​1128]

v0.53.1

Compare Source

Changelog

v0.53.1 (2022-08-02)

Full Changelog

Added Features

• Singularity Image Format (SIF) support [Issue #​937]

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Mend Renovate. View repository job log here.