{"id":378891,"url":"https://github.com/anchore/syft","last_synced_at":"2026-08-12T18:44:21.781Z","repository":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36578047,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-12T02:00:07.134Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"anchore","name":"Anchore, Inc.","uuid":"16208487","kind":"organization","description":"","email":"info@anchore.com","website":"https://anchore.com/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16208487?v=4","repositories_count":96,"last_synced_at":"2026-08-07T14:34:15.826Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/anchore","funding_links":[],"total_stars":26319,"followers":582,"following":0,"created_at":"2022-11-13T02:25:02.273Z","updated_at":"2026-08-07T14:34:15.840Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore/repositories"},"packages":[{"id":13013014,"name":"syft-zsh-completion","ecosystem":"alpine","description":"Zsh completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":2,"first_release_published_at":"2026-01-15T20:32:31.000Z","latest_release_published_at":"2026-02-05T09:16:59.000Z","latest_release_number":"1.38.0-r3","last_synced_at":"2026-04-09T01:08:56.658Z","created_at":"2026-01-31T02:15:14.787Z","updated_at":"2026-08-07T23:36:08.312Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.23/community/x86_64/syft-zsh-completion","install_command":"apk add syft-zsh-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390736,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-07T23:36:08.312Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft-zsh-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.23","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-zsh-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-zsh-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-zsh-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft-zsh-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft-zsh-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft-zsh-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft-zsh-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft-zsh-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft-zsh-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":"michal@polanski.me","url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":378,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2026-03-03T16:37:36.424Z","updated_at":"2026-03-03T16:37:36.424Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.23","url":"https://pkgs.alpinelinux.org/packages?branch=v3.23","ecosystem":"alpine","default":false,"packages_count":27576,"maintainers_count":428,"namespaces_count":2,"keywords_count":189,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":733},"icon_url":"https://github.com/alpinelinux.png","created_at":"2026-01-24T14:35:50.739Z","updated_at":"2026-08-12T05:05:17.297Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/namespaces"}},{"id":7257490,"name":"syft-fish-completion","ecosystem":"alpine","description":"Fish completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":69,"first_release_published_at":"2023-04-01T18:45:50.000Z","latest_release_published_at":"2026-07-13T21:50:10.000Z","latest_release_number":"1.46.0-r0","last_synced_at":"2026-07-14T03:29:07.677Z","created_at":"2023-04-01T19:16:03.714Z","updated_at":"2026-08-07T23:36:10.603Z","registry_url":"https://pkgs.alpinelinux.org/package/edge/community/x86_64/syft-fish-completion","install_command":"apk add syft-fish-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2025-10-20T14:22:16.000Z","size":23003,"stargazers_count":7796,"open_issues_count":500,"forks_count":720,"subscribers_count":62,"default_branch":"main","last_synced_at":"2025-10-20T16:13:38.101Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2025-10-20T14:24:07.000Z","dependencies_parsed_at":"2023-12-20T09:43:51.606Z","dependency_job_id":"3d1fd421-c43b-4d60-87a0-71ec0266d70f","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":240,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":280449175,"owners_count":26332601,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-22T02:00:06.515Z","response_time":63,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"anchore","name":"Anchore, Inc.","uuid":"16208487","kind":"organization","description":"","email":"info@anchore.com","website":"https://anchore.com/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16208487?v=4","repositories_count":43,"last_synced_at":"2023-03-02T09:35:13.089Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/anchore","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-13T02:25:02.273Z","updated_at":"2023-03-02T09:35:13.093Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore/repositories"},"tags":[{"name":"v1.34.2","sha":"0c98a364d503789ff8d7f122763bb8748de9772f","kind":"tag","published_at":"2025-10-16T12:19:26.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.34.2","html_url":"https://github.com/anchore/syft/releases/tag/v1.34.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.34.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.2/manifests"},{"name":"v1.34.1","sha":"e9a8bc5ab97f94b7f9210d7a0f4a981cdbb22232","kind":"tag","published_at":"2025-10-15T15:27:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.34.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.34.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.34.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.1/manifests"},{"name":"v1.34.0","sha":"6d790ec6ec98b263dae0c54259859b35c3527e1b","kind":"tag","published_at":"2025-10-14T22:25:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.34.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.34.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.34.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.0/manifests"},{"name":"v1.33.0","sha":"b87b9191497c2d410b42c05591347d428129fd2a","kind":"tag","published_at":"2025-09-15T20:38:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.33.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.33.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.33.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.33.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.33.0/manifests"},{"name":"v1.32.0","sha":"2d8e337d3469712c7d92770792f0117ad82c4ad3","kind":"tag","published_at":"2025-08-26T21:47:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.32.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.32.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.32.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.32.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.32.0/manifests"},{"name":"v1.31.0","sha":"ab9db0024ed35ab6a4e33e539593f5a3c58a5594","kind":"tag","published_at":"2025-08-13T14:50:45.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.31.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.31.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.31.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.31.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.31.0/manifests"},{"name":"v1.30.0","sha":"49736e7c4acd3cb1aed2d3a8c8cdcd696ac77166","kind":"tag","published_at":"2025-08-08T18:21:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.30.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.30.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.30.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.30.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.30.0/manifests"},{"name":"v1.29.1","sha":"386ef842d99a72027fb5fd1085fde87883640eaf","kind":"tag","published_at":"2025-07-30T18:16:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.29.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.29.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.29.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.1/manifests"},{"name":"v1.29.0","sha":"6f36b586ba1cc49074573d07ca397d18e9eecd16","kind":"tag","published_at":"2025-07-21T19:36:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.29.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.29.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.0/manifests"},{"name":"v1.28.0","sha":"e8b62ab9aca2e896ab608c118619c5a7831bc737","kind":"tag","published_at":"2025-07-02T16:25:07.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.28.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.28.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.28.0/manifests"},{"name":"v1.27.1","sha":"10f06317104361183b4cb803c0e6ac1727257551","kind":"tag","published_at":"2025-06-12T13:39:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.27.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.27.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.27.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.1/manifests"},{"name":"v1.27.0","sha":"18f9b5ab58aa04dda61a3eed8123bd89470befe9","kind":"tag","published_at":"2025-06-09T18:36:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.27.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.27.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.0/manifests"},{"name":"v1.26.1","sha":"7bfb4c86a6d7e5343c45c2844a232b6c7ba4c51c","kind":"tag","published_at":"2025-05-22T12:36:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.26.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.26.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.26.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.1/manifests"},{"name":"v1.26.0","sha":"ac883f52edb8ca1f5a0a61d12c288d4b34ea3897","kind":"tag","published_at":"2025-05-20T21:27:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.26.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.26.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.0/manifests"},{"name":"v1.25.1","sha":"db77b54c019c9aae142d13ca642ddb56d0deefa6","kind":"tag","published_at":"2025-05-16T18:53:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.25.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.25.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.25.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.1/manifests"},{"name":"v1.25.0","sha":"2d4fe513ecec7af9626b9dada586c7a0ff63a67d","kind":"tag","published_at":"2025-05-16T16:29:38.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.25.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.25.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.0/manifests"},{"name":"v1.24.0","sha":"3c7018a853ab7b311db9ff70e1cf3113b46d9c0c","kind":"tag","published_at":"2025-05-14T14:51:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.24.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.24.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.24.0/manifests"},{"name":"v1.23.1","sha":"a714fb8391471c6ddf6e583229d982d1316d64a8","kind":"tag","published_at":"2025-04-25T14:52:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.23.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.23.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.23.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.1/manifests"},{"name":"v1.23.0","sha":"4211d796672ab21250a4d6fd8e45204d6dc00d0e","kind":"tag","published_at":"2025-04-24T20:16:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.23.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.0/manifests"},{"name":"v1.22.0","sha":"9ab83874ed21c07479d8eeddd88a6894e1ff8537","kind":"tag","published_at":"2025-04-01T14:37:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.22.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.22.0/manifests"},{"name":"v1.21.0","sha":"7bdbfc04781a18827c30a505d64a8671c9827bd7","kind":"tag","published_at":"2025-03-17T18:52:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.21.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.21.0/manifests"},{"name":"v1.20.0","sha":"46522bcc5dff8b65b61a7cda1393abe515802306","kind":"tag","published_at":"2025-02-21T20:44:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.20.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.20.0/manifests"},{"name":"v1.19.0","sha":"222e6548a96f8c80015c1d24f01dea3052a04893","kind":"tag","published_at":"2025-01-22T19:57:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.19.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.19.0/manifests"},{"name":"v1.18.1","sha":"5e16e5031a13f8a11057feb8544decebfc43b4ed","kind":"tag","published_at":"2024-12-13T18:41:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.18.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.18.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.18.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.1/manifests"},{"name":"v1.18.0","sha":"d38efb0b7fb7106909bc532a4efc68b78a917a34","kind":"tag","published_at":"2024-12-09T21:02:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.18.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.0/manifests"},{"name":"v1.17.0","sha":"a8d4202d77b6b31e75ce5af09a8b03ad14e533d3","kind":"tag","published_at":"2024-11-21T14:39:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.17.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.17.0/manifests"},{"name":"v1.16.0","sha":"8a41d772509d37267a65e0b425808e883e4b9dce","kind":"tag","published_at":"2024-11-04T22:29:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.16.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.16.0/manifests"},{"name":"v1.15.0","sha":"55cc1877ef246d8cabfd9bbeb0a8747b59c03431","kind":"tag","published_at":"2024-10-28T21:11:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.15.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.15.0/manifests"},{"name":"v1.14.2","sha":"e4e985b9b05b9570648399adf292ab7f659b4cef","kind":"tag","published_at":"2024-10-21T17:20:27.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.14.2","html_url":"https://github.com/anchore/syft/releases/tag/v1.14.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.14.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.2/manifests"},{"name":"v1.14.1","sha":"754cebee6414c614acf03ee0f87abfcf6176e051","kind":"tag","published_at":"2024-10-15T13:04:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.14.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.14.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.14.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.1/manifests"},{"name":"v1.14.0","sha":"ccbee94b876240284c25c8931c6233fc71a5b7fb","kind":"tag","published_at":"2024-10-07T20:40:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.14.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.0/manifests"},{"name":"v1.13.0","sha":"01de99b25304ec95197c00b21d698f127b31a887","kind":"tag","published_at":"2024-09-24T13:28:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.13.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.13.0/manifests"},{"name":"v1.12.2","sha":"fcd5ec951de6b3fc1f1aa2a36968356d2eb22170","kind":"tag","published_at":"2024-09-11T14:12:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.12.2","html_url":"https://github.com/anchore/syft/releases/tag/v1.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.2/manifests"},{"name":"v1.12.1","sha":"c33a51d3d839ba619ea2217ee00a56be23f9fb9f","kind":"tag","published_at":"2024-09-10T20:42:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.12.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.1/manifests"},{"name":"v1.12.0","sha":"dbc4238f63c027efc09ce5fe51e069c1145f6846","kind":"tag","published_at":"2024-09-10T17:37:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.12.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.0/manifests"},{"name":"v1.11.1","sha":"95b4a88256bddebb91831250f28f602f8c36552a","kind":"tag","published_at":"2024-08-20T16:25:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.11.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.1/manifests"},{"name":"v1.11.0","sha":"19cc664cf8e7020dd692a62efcbba98ab670bde9","kind":"tag","published_at":"2024-08-09T17:52:21.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.11.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.0/manifests"},{"name":"v1.10.0","sha":"a4b5dcd0df80f6a58c8610e25104647710c1da5d","kind":"tag","published_at":"2024-07-30T16:13:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.10.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.10.0/manifests"},{"name":"v1.9.0","sha":"4e09908ba124dca7e6f1f6e7dc4f4663fae658ca","kind":"tag","published_at":"2024-07-11T17:32:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.9.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.9.0/manifests"},{"name":"v1.8.0","sha":"1eae9333a9450c135ff929578597c79b01c9f5ff","kind":"tag","published_at":"2024-06-24T15:43:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.8.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.8.0/manifests"},{"name":"v1.7.0","sha":"22d57314826fce1bff469d8173884489f8212925","kind":"tag","published_at":"2024-06-14T19:48:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.7.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.7.0/manifests"},{"name":"v1.6.0","sha":"c43f4fb416c34c1c4b3997373689d8d4c0fb9b36","kind":"tag","published_at":"2024-06-10T15:39:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.6.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"ac34808b9c55bb274b1205f9b5d9cf495239577d","kind":"tag","published_at":"2024-05-28T15:11:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.5.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.5.0/manifests"},{"name":"v1.4.1","sha":"c200896a9644f9b6bd4bc3785c848276c33bb53c","kind":"tag","published_at":"2024-05-09T19:45:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.4.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.1/manifests"},{"name":"v1.4.0","sha":"4194a2cd34d2f15dd9a96774ba2fbc5463db4c58","kind":"tag","published_at":"2024-05-09T18:14:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.4.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"87cd6c8c48239a20c413f6461e90000ff30ee601","kind":"tag","published_at":"2024-04-26T15:01:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.3.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"dde5d349b1eef740c285255e6a9e3a8f5c9938e1","kind":"tag","published_at":"2024-04-12T18:31:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.2.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.2.0/manifests"},{"name":"v1.1.1","sha":"1e31356c49bf2c30fd80c833482e1fbe4133ff83","kind":"tag","published_at":"2024-04-04T14:52:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.1.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"f4e18961b979f5e6d0cc3b1e4fce608c8ceb29d8","kind":"tag","published_at":"2024-03-25T21:41:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.1.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"1b121ac3f4d589060ddf1fac0bcd6871ea4731e3","kind":"tag","published_at":"2024-03-06T19:51:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.0.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"356f7c92b464b69be3a2a898cd98a63037eeadcc","kind":"tag","published_at":"2024-02-29T14:50:50.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.0.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.0/manifests"},{"name":"v0.105.1","sha":"928511ea0f1449e057e8057e38743d258b22476b","kind":"tag","published_at":"2024-02-26T16:52:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.105.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.105.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.105.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.1/manifests"},{"name":"v0.105.0","sha":"65cadda48653d2452a7e41a47a60d2934e8fcb07","kind":"tag","published_at":"2024-02-14T21:16:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.105.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.105.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.105.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.0/manifests"},{"name":"v0.104.0","sha":"bd0cb916df4376a06e56ef7f3cc0da6659d7c2c6","kind":"tag","published_at":"2024-02-07T20:51:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.104.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.104.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.104.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.104.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.104.0/manifests"},{"name":"v0.103.1","sha":"377538e4a692b8070716eb091456b112ccc2cb81","kind":"tag","published_at":"2024-01-31T17:09:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.103.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.103.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.103.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.1/manifests"},{"name":"v0.103.0","sha":"bbe7fa180a38079318fd4a75d6276720374ccecd","kind":"tag","published_at":"2024-01-31T16:34:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.103.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.103.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.103.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.0/manifests"},{"name":"v0.102.0","sha":"d7c51e5c82de8b64b992f5962842c20903b5934a","kind":"tag","published_at":"2024-01-26T14:34:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.102.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.102.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.102.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.102.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.102.0/manifests"},{"name":"v0.101.1","sha":"3eab5932e5271eea5506ab9710239b1415c827f8","kind":"tag","published_at":"2024-01-19T22:02:00.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.101.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.101.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.101.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.1/manifests"},{"name":"v0.101.0","sha":"297ece69045d6d73a184ed955a99d90769b1cb45","kind":"tag","published_at":"2024-01-17T20:41:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.101.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.101.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.101.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.0/manifests"},{"name":"v0.100.0","sha":"a16a4ad6c993aaaa1ec502667c215b0e8c8e51ff","kind":"tag","published_at":"2024-01-05T21:33:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.100.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.100.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.100.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.100.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.100.0/manifests"},{"name":"v0.99.0","sha":"3cffa0b7fd276a35123c48e45407c4f402f2c58f","kind":"tag","published_at":"2023-12-21T16:18:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.99.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.99.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.99.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.99.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.99.0/manifests"},{"name":"v0.98.0","sha":"5c8dd4c3a7632dcfd999bab7a5b73c3180f1b628","kind":"tag","published_at":"2023-11-29T14:52:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.98.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.98.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.98.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.98.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.98.0/manifests"},{"name":"v0.97.1","sha":"7cfb5f630a7a2105d49d65eaaaa2e2c06e4eda73","kind":"tag","published_at":"2023-11-17T21:03:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.97.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.97.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.97.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.1/manifests"},{"name":"v0.97.0","sha":"1c787f436fca20cbec4541f978ed2a634b880c97","kind":"tag","published_at":"2023-11-16T22:56:21.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.97.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.97.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.97.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.0/manifests"},{"name":"v0.96.0","sha":"0891d35e0774f175e3a3f170edcce9ad2f4f015b","kind":"tag","published_at":"2023-11-09T14:04:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.96.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.96.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.96.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.96.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.96.0/manifests"},{"name":"v0.95.0","sha":"9b98785aab9346999a0b5e9f5e4b4e63a1b1916c","kind":"tag","published_at":"2023-11-07T16:43:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.95.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.95.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.95.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.95.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.95.0/manifests"},{"name":"v0.94.0","sha":"8f6bdde6662aa8050a71eadbdb7bd5a3b079a56d","kind":"tag","published_at":"2023-10-20T17:21:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.94.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.94.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.94.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.94.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.94.0/manifests"},{"name":"v0.93.0","sha":"0748945c8341a06415ac80e624b84e8d3f548d39","kind":"tag","published_at":"2023-10-10T17:27:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.93.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.93.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.93.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.93.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.93.0/manifests"},{"name":"v0.92.0","sha":"8f57d22f639e132cbd87324abacd864232c611ce","kind":"tag","published_at":"2023-09-27T15:40:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.92.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.92.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.92.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.92.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.92.0/manifests"},{"name":"v0.91.0","sha":"b7fa75d7f82a6816d307805ac07e6965c799e938","kind":"tag","published_at":"2023-09-20T19:41:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.91.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.91.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.91.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.91.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.91.0/manifests"},{"name":"v0.90.0","sha":"b82c0ffc3417bdc8c38f4633af95a668ec29fa35","kind":"commit","published_at":"2023-09-11T16:12:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.90.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.90.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.90.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.90.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.90.0/manifests"},{"name":"v0.89.0","sha":"b454160549bbd199e0a5693750856f30b41767f7","kind":"commit","published_at":"2023-08-31T14:50:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.89.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.89.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.89.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.89.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.89.0/manifests"},{"name":"v0.88.0","sha":"dd09e0362e46bee7285e0fca5ed96e398c314380","kind":"commit","published_at":"2023-08-25T20:45:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.88.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.88.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.88.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.88.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.88.0/manifests"},{"name":"v0.87.1","sha":"4762ba0943785fe778276893388e839e01787b45","kind":"commit","published_at":"2023-08-17T16:55:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.87.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.87.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.87.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.1/manifests"},{"name":"v0.87.0","sha":"b3d7ba569b64376cf33df717e3bc40d8375e033b","kind":"commit","published_at":"2023-08-14T15:37:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.87.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.87.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.87.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.0/manifests"},{"name":"v0.86.1","sha":"e2f7befbfbf88053dfb2007c6499a4bb2d232c3c","kind":"commit","published_at":"2023-07-31T17:29:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.86.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.86.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.86.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.1/manifests"},{"name":"v0.86.0","sha":"f14742b3f3a6f8cd4bc696dbafee53ab1d665da7","kind":"commit","published_at":"2023-07-31T16:02:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.86.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.86.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.86.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.0/manifests"},{"name":"v0.85.0","sha":"4fc17edd146af34ab06f5b0443ef8ddac3aaf076","kind":"commit","published_at":"2023-07-12T17:14:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.85.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.85.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.85.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.85.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.85.0/manifests"},{"name":"v0.84.1","sha":"791d1f955215f1dad383c9835e4d3c01267dc0f5","kind":"commit","published_at":"2023-06-28T16:05:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.84.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.84.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.84.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.1/manifests"},{"name":"v0.84.0","sha":"5d54e6e847192f63db80c9a7ee23197476c632ce","kind":"commit","published_at":"2023-06-20T16:08:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.84.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.84.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.84.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.0/manifests"},{"name":"v0.83.1","sha":"a1bba36d514c3ff0f34635b9cdc9f07a92ea793b","kind":"commit","published_at":"2023-06-14T15:45:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.83.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.83.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.83.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.1/manifests"},{"name":"v0.83.0","sha":"1764e1c3f6bd66781f8350d957a1f95e4d9ad3de","kind":"commit","published_at":"2023-06-05T19:04:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.83.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.83.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.83.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.0/manifests"},{"name":"v0.82.0","sha":"4ac8fdf6df0da4cd6f76820dbec9f490ee56bcba","kind":"commit","published_at":"2023-05-23T16:58:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.82.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.82.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.82.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.82.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.82.0/manifests"},{"name":"v0.81.0","sha":"334a775cb9cd6bf50033de1bb3aa04f46b669f5d","kind":"commit","published_at":"2023-05-19T14:21:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.81.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.81.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.81.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.81.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.81.0/manifests"},{"name":"v0.80.0","sha":"0f1aed447751f92dcc0165b56aa474ec9706805e","kind":"commit","published_at":"2023-05-05T15:41:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.80.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.80.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.80.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.80.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.80.0/manifests"},{"name":"v0.79.0","sha":"b2b332e8b2b66af0905e98b54ebd713a922be1a8","kind":"commit","published_at":"2023-04-21T13:34:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.79.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.79.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.79.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.79.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.79.0/manifests"},{"name":"v0.78.0","sha":"244b797a199458f504758c0e3a775572a021e629","kind":"commit","published_at":"2023-04-17T16:26:07.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.78.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.78.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.78.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.78.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.78.0/manifests"},{"name":"v0.77.0","sha":"dd30c99bc2439cb91e3d084eb21e1040dd5a54dc","kind":"commit","published_at":"2023-04-11T14:13:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.77.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.77.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.77.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.77.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.77.0/manifests"},{"name":"v0.76.1","sha":"7845381331e873f65fd5013f44b7d85168ced5f5","kind":"commit","published_at":"2023-04-05T17:59:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.76.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.76.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.76.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.1/manifests"},{"name":"v0.76.0","sha":"dfcc07e5122217ca9e2fc75817c593356fc0c405","kind":"commit","published_at":"2023-03-31T14:04:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.76.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.76.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.76.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.0/manifests"},{"name":"v0.75.0","sha":"cc0a376aba43e7f9c5fe66320643f72088533838","kind":"commit","published_at":"2023-03-13T17:26:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.75.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.75.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.75.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.75.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.75.0/manifests"},{"name":"v0.74.1","sha":"41cbbe09b205e3b80e8a57d4f7a509b5f938557d","kind":"commit","published_at":"2023-03-07T17:54:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.74.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.74.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.74.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.1/manifests"},{"name":"v0.74.0","sha":"5f90d0371873faf5eb8f2e748909b32294be6263","kind":"commit","published_at":"2023-03-01T20:35:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.74.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.74.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.74.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.0/manifests"},{"name":"v0.72.1","sha":"be71f7c6aea3fd663e0f059df1d8060c2f6e916d","kind":"commit","published_at":"2023-02-22T21:34:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.72.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.72.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.72.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.1/manifests"},{"name":"v0.73.0","sha":"aa151da5fe2a1b11502c852fd2d3ad462c1d245f","kind":"commit","published_at":"2023-02-22T19:08:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.73.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.73.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.73.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.73.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.73.0/manifests"},{"name":"v0.72.0","sha":"2642a3616170ccbda9d8c8cb4f4a6b0fd5c63da9","kind":"commit","published_at":"2023-02-16T15:22:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.72.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.72.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.72.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.0/manifests"},{"name":"v0.71.0","sha":"88c81d33edc67b0b9636d0046417a9373ac8b74f","kind":"commit","published_at":"2023-02-09T16:35:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.71.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.71.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.71.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.71.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.71.0/manifests"},{"name":"v0.70.0","sha":"9995950c70e849f9921919faffbfcf46401f71f3","kind":"commit","published_at":"2023-02-03T18:06:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.70.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.70.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.70.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.70.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.70.0/manifests"},{"name":"v0.69.1","sha":"1530ef354ffaf59cef6a02c949f2cdb82353954f","kind":"commit","published_at":"2023-01-31T16:53:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.69.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.69.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.69.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.1/manifests"},{"name":"v0.69.0","sha":"b81c9805dcc9bf25dad7659fd9c2bbf7dd3f3d90","kind":"commit","published_at":"2023-01-30T18:47:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.69.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.69.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.69.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.0/manifests"},{"name":"v0.68.1","sha":"4c0aef09b8d7fb78200b04416f474b90b79370de","kind":"commit","published_at":"2023-01-25T17:18:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.68.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.68.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.68.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.1/manifests"},{"name":"v0.68.0","sha":"e58050bac045be672621047d5699b88884e2da62","kind":"commit","published_at":"2023-01-20T14:49:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.68.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.68.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.68.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.0/manifests"},{"name":"v0.66.2","sha":"03971ace43b877e371c13e3f786c1f6c3a4ec507","kind":"commit","published_at":"2023-01-17T21:26:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.66.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.2/manifests"},{"name":"v0.66.1","sha":"ac94bf530c7b1e6ee5df1ed0f9f6454fca8bc918","kind":"commit","published_at":"2023-01-12T22:42:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.66.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.1/manifests"},{"name":"v0.66.0","sha":"260cb4c72d001b63e7462ed214caeb0aab605714","kind":"commit","published_at":"2023-01-12T20:03:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.66.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.0/manifests"},{"name":"v0.65.0","sha":"bc1edb9c8a2fb4824bfdcac6147edc2bbf47aaf6","kind":"commit","published_at":"2023-01-04T16:34:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.65.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.65.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.65.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.65.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.65.0/manifests"},{"name":"v0.64.0","sha":"e1e489a2849c8432781a7cb58b257fa935efa1cf","kind":"commit","published_at":"2022-12-23T13:37:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.64.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.64.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.64.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.64.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.64.0/manifests"},{"name":"v0.63.0","sha":"23a3173c9f2461e5906d1b9e3ac20b4806d74777","kind":"commit","published_at":"2022-12-12T17:55:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.63.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.63.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.63.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.63.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.63.0/manifests"},{"name":"v0.62.3","sha":"247b054ab56f848c477495218754166272f470b5","kind":"commit","published_at":"2022-11-30T16:11:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.3/manifests"},{"name":"v0.62.2","sha":"0cbd0cc70377d5b1b11b808fbbf9ddec450c68ee","kind":"commit","published_at":"2022-11-28T15:43:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.2/manifests"},{"name":"v0.62.1","sha":"098e61dcc81d7a6d666bc62a2166c9b8f32c61bc","kind":"commit","published_at":"2022-11-21T14:26:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.1/manifests"},{"name":"v0.62.0","sha":"da4b2df57640e03f273a2e7e9b04eca40555e139","kind":"commit","published_at":"2022-11-18T18:42:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.0/manifests"},{"name":"v0.61.0","sha":"67888ee855ad37948bfee98e3aa7d592b4f91e95","kind":"commit","published_at":"2022-11-18T14:45:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.61.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.61.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.61.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.61.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.61.0/manifests"},{"name":"v0.60.3","sha":"bc9740d50a38e9660f2f98ed91d84c6d8799cf70","kind":"commit","published_at":"2022-11-03T14:38:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.3/manifests"},{"name":"v0.60.2","sha":"35f0f2931e310882fe7117c41d57a185d72ca498","kind":"commit","published_at":"2022-11-02T14:05:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.2/manifests"},{"name":"v0.60.1","sha":"ba57f3db5189c632ecaa02f9cf0b634c5a55099c","kind":"commit","published_at":"2022-11-01T16:28:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.1/manifests"},{"name":"v0.60.0","sha":"4c5c6f6319d931f324c3a15a88ba2593109cbbe2","kind":"commit","published_at":"2022-11-01T14:30:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.0/manifests"},{"name":"v0.59.0","sha":"41bc6bb410352845f22766e27dd48ba93aa825a4","kind":"commit","published_at":"2022-10-14T19:54:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.59.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.59.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.59.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.59.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.59.0/manifests"},{"name":"v0.58.0","sha":"b9b13d5525df89194d332467f692bc28bc68d07f","kind":"commit","published_at":"2022-09-29T18:45:59.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.58.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.58.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.58.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.58.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.58.0/manifests"},{"name":"v0.57.0","sha":"04d288b3643f906255af88108f27712bb2be5b63","kind":"commit","published_at":"2022-09-19T20:08:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.57.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.57.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.57.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.57.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.57.0/manifests"},{"name":"v0.56.0","sha":"c5dca001e267d2a91ff82e53ca72535ceef6af02","kind":"commit","published_at":"2022-09-09T18:59:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.56.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.56.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.56.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.56.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.56.0/manifests"},{"name":"v0.55.0","sha":"a7966a4d9d8155be788af33fe5e5af2e40043f82","kind":"commit","published_at":"2022-08-29T19:28:19.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.55.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.55.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.55.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.55.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.55.0/manifests"},{"name":"v0.54.0","sha":"21eb77206020c04c9ca5316562e32179c73926a9","kind":"commit","published_at":"2022-08-16T18:14:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.54.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.54.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.54.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.54.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.54.0/manifests"},{"name":"v0.53.4","sha":"69bde44c6e50a5838cdd2c2c821edb0111013178","kind":"commit","published_at":"2022-08-03T16:24:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.4/manifests"},{"name":"v0.53.3","sha":"042304ee4c614708b4e293f525c5d0a435ede2cf","kind":"commit","published_at":"2022-08-03T13:46:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.3/manifests"},{"name":"v0.53.2","sha":"69fb0a6f3bd6f0281e0d466ab7db23090a3ebc65","kind":"commit","published_at":"2022-08-02T19:25:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.2/manifests"},{"name":"v0.53.1","sha":"f5d02d4e527d3fe1906fd209ce036f58049979f3","kind":"commit","published_at":"2022-08-02T15:44:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.1/manifests"},{"name":"v0.53.0","sha":"b7f587f5dcae631b76d2f80ed2a3b9a207972d80","kind":"commit","published_at":"2022-08-02T13:42:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.0/manifests"},{"name":"v0.52.0","sha":"ba9adb17ebb510a2a3bd2b641738b1d9235e1f3e","kind":"commit","published_at":"2022-07-21T13:17:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.52.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.52.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.52.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.52.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.52.0/manifests"},{"name":"v0.51.0","sha":"470b13045bbbf150f3c79d1487a01ae6acc5592d","kind":"commit","published_at":"2022-07-11T14:09:08.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.51.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.51.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.51.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.51.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.51.0/manifests"},{"name":"v0.50.0","sha":"69134ed3b54bc8b1d86d868611f7d069ce3290a8","kind":"commit","published_at":"2022-07-05T15:57:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.50.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.50.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.50.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.50.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.50.0/manifests"},{"name":"v0.49.0","sha":"d5e12ff89c2d3af684152dd401618533a6f1b67e","kind":"commit","published_at":"2022-06-24T15:05:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.49.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.49.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.49.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.49.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.49.0/manifests"},{"name":"v0.48.1","sha":"03e37044d437294b0aac44a4e9277eb8f6c8be3f","kind":"commit","published_at":"2022-06-16T18:56:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.48.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.48.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.48.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.1/manifests"},{"name":"v0.48.0","sha":"9e72771b851f1657ade0c2214569f675cf0813f3","kind":"commit","published_at":"2022-06-16T14:43:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.48.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.48.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.48.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.0/manifests"},{"name":"v0.47.0","sha":"f15d4a9984428103a60e2298d0755b3adcc32a3a","kind":"commit","published_at":"2022-06-08T21:39:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.47.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.47.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.47.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.47.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.47.0/manifests"},{"name":"v0.46.3","sha":"7cb8e1fc14a278ec5afce379623a47577aba9917","kind":"commit","published_at":"2022-05-25T21:40:08.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.3/manifests"},{"name":"v0.46.2","sha":"d41afe05eb8fecd2906f5db9661910dbc99fc3dd","kind":"commit","published_at":"2022-05-19T20:10:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.2/manifests"},{"name":"v0.46.1","sha":"03ee4fdf5e87907c5a49ae353c44682894bb411c","kind":"commit","published_at":"2022-05-12T16:56:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.1/manifests"},{"name":"v0.46.0","sha":"91e2fd8532254216a83c80891611751d0c8fba7b","kind":"commit","published_at":"2022-05-11T22:35:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.0/manifests"},{"name":"v0.45.1","sha":"37927b8b23cac234289a73aa3e886675d463e477","kind":"commit","published_at":"2022-05-03T13:38:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.45.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.45.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.45.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.1/manifests"},{"name":"v0.45.0","sha":"36973021fad57baf443ffa88181394b87ce109a0","kind":"commit","published_at":"2022-04-29T15:18:45.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.45.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.45.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.45.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.0/manifests"},{"name":"v0.44.1","sha":"248023baafdf2a74f8bdaf98beaee3f40584bb7d","kind":"commit","published_at":"2022-04-15T17:00:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.44.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.44.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.44.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.1/manifests"},{"name":"v0.44.0","sha":"b46d044d7e3afc2ee09fd5ff26635f783628126e","kind":"commit","published_at":"2022-04-11T18:56:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.44.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.44.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.44.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.0/manifests"},{"name":"v0.43.2","sha":"e415bb21e7a609c12dc37a2d6395796fb675e3fe","kind":"commit","published_at":"2022-04-06T21:15:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.43.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.2/manifests"},{"name":"v0.43.1","sha":"748cfbf00647df3366ec3c4ad89d87762625da5a","kind":"commit","published_at":"2022-04-06T16:27:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.43.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.1/manifests"},{"name":"v0.43.0","sha":"f24bbc1838351e4e408368f3312c76db6552e71e","kind":"commit","published_at":"2022-03-31T19:45:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.43.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.0/manifests"},{"name":"v0.42.4","sha":"a7db43f5ec159cad98d0298a2375ee1f4c397894","kind":"commit","published_at":"2022-03-24T14:11:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.4/manifests"},{"name":"v0.42.3","sha":"cc2c0e57a0d02a1719b4e34d0793f09e9699c8b0","kind":"commit","published_at":"2022-03-23T18:34:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.3/manifests"},{"name":"v0.42.2","sha":"c0b547bdb239f00ef43b7f69a61813b710d0b221","kind":"commit","published_at":"2022-03-22T17:19:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.2/manifests"},{"name":"v0.42.1","sha":"283db88dc4d40502219c80af36d073b2f1556007","kind":"commit","published_at":"2022-03-21T18:59:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.1/manifests"},{"name":"v0.42.0","sha":"f4734d28b391800f824a89712897daf19237812c","kind":"commit","published_at":"2022-03-17T14:22:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.0/manifests"},{"name":"v0.41.6","sha":"ee0a1d172c0c6f0da907694b9b48870b33d2852d","kind":"commit","published_at":"2022-03-16T13:10:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.6/manifests"},{"name":"v0.41.5","sha":"b9b3ccecf9438f35977f8e8c6187bd616630640b","kind":"commit","published_at":"2022-03-15T17:02:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.5/manifests"},{"name":"v0.41.4","sha":"c7cf8b0b264562b463dd1f8d0ca7a6d1215ef41f","kind":"commit","published_at":"2022-03-11T18:17:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.4/manifests"},{"name":"v0.41.3","sha":"c7cf8b0b264562b463dd1f8d0ca7a6d1215ef41f","kind":"commit","published_at":"2022-03-11T18:17:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.3/manifests"},{"name":"v0.41.2","sha":"7789506dc65830c32f0bbc41e2be657f9fa473cd","kind":"commit","published_at":"2022-03-11T03:38:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.2/manifests"},{"name":"v0.41.1","sha":"07d3c9af52f241613971ccadd18c8f8ab67abc4e","kind":"commit","published_at":"2022-03-08T15:37:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.1/manifests"},{"name":"v0.41.0","sha":"5123f073c7e5b37a87287d5e9e4a01f4611b3eee","kind":"commit","published_at":"2022-03-07T17:37:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.0/manifests"},{"name":"v0.40.1","sha":"b2ab4671b915d50b523ae77b85e9554e5f8bcf95","kind":"commit","published_at":"2022-03-03T22:13:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.40.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.40.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.40.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.1/manifests"},{"name":"v0.40.0","sha":"1e75cb0418df15f8bc8193b1b8a3b3a8d81cb3b0","kind":"commit","published_at":"2022-03-02T15:09:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.40.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.40.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.40.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.0/manifests"},{"name":"v0.39.3","sha":"1d1a7de31457b0f2974090101cb793ee78eeb9b7","kind":"commit","published_at":"2022-02-26T12:30:38.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.3/manifests"},{"name":"v0.39.2","sha":"24cd39089a82abae50195ab9ea3f7be0ef6a2d51","kind":"commit","published_at":"2022-02-26T01:07:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.2/manifests"},{"name":"v0.39.1","sha":"c89131bcf3851505c2ff5f7ca3ae66b1b6a725d4","kind":"commit","published_at":"2022-02-25T16:32:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.1/manifests"},{"name":"v0.39.0","sha":"6c306efed2811c0c78b599355c82f937fe7a251d","kind":"commit","published_at":"2022-02-24T16:15:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.0/manifests"},{"name":"v0.38.0","sha":"52d2e62cdcc08967ead746820346766e12698488","kind":"commit","published_at":"2022-02-15T17:51:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.38.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.38.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.38.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.38.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.38.0/manifests"},{"name":"v0.37.10","sha":"0ed284212305c76d65687aad6eaabf91142e0ddc","kind":"commit","published_at":"2022-02-07T23:47:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.10","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.10/manifests"},{"name":"v0.37.9","sha":"b78c90d0186c959629722d30fb1ca7c6d27faadb","kind":"commit","published_at":"2022-02-07T22:50:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.9","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.9/manifests"},{"name":"v0.37.8","sha":"2c62651c8279f288d9668039da4a865e9a5d0b2a","kind":"commit","published_at":"2022-02-07T21:55:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.8","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.8/manifests"},{"name":"v0.37.7","sha":"5519a25035e6c6ad46bb4c37ef4e174d1060a257","kind":"commit","published_at":"2022-02-07T17:03:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.7","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.7/manifests"},{"name":"v0.37.6","sha":"950ad681a03a5f6924388f92edcf638b87576992","kind":"commit","published_at":"2022-02-07T15:55:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.6/manifests"},{"name":"v0.37.5","sha":"e474b2f23c1e42d274af511333e0d06b879b169d","kind":"commit","published_at":"2022-02-05T15:23:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.5/manifests"},{"name":"v0.37.4","sha":"e7bef5e511c94940c46bba9a4193dacc7c9e97c5","kind":"commit","published_at":"2022-02-04T21:49:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.4/manifests"},{"name":"v0.37.3","sha":"e4ac7700dd76b9cf30778ef40e9acfd3168dcaeb","kind":"commit","published_at":"2022-02-04T19:44:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.3/manifests"},{"name":"v0.37.2","sha":"d3469801fc1e3eae117049064f751689c64bc8bc","kind":"commit","published_at":"2022-02-04T19:04:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.2/manifests"},{"name":"v0.37.1","sha":"3f50bb8fa74436f36202b2582f02be7f91644ab5","kind":"commit","published_at":"2022-02-04T18:23:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.1/manifests"},{"name":"v0.37.0","sha":"341288ba29d66d36afe80f2a7d8eb9b1e53d0a5a","kind":"commit","published_at":"2022-02-04T17:41:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.0/manifests"},{"name":"v0.36.0","sha":"aebe843c6f0307d5c263c25257caf3e6ea827c78","kind":"commit","published_at":"2022-01-19T16:43:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.36.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.36.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.36.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.36.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.36.0/manifests"},{"name":"v0.35.1","sha":"b77ddfc29c2d93dbc61c25b8f0e726c0e238f43b","kind":"commit","published_at":"2022-01-10T18:40:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.35.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.35.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.35.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.1/manifests"},{"name":"v0.35.0","sha":"5e5312c72ddd4b3d4d6200a5e74e78a6d76aa0c7","kind":"commit","published_at":"2022-01-06T22:52:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.35.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.35.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.35.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.0/manifests"},{"name":"v0.34.0","sha":"7f8cb0bd8068709982ef23e931e1ceaa2dfac955","kind":"commit","published_at":"2021-12-22T20:55:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.34.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.34.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.34.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.34.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.34.0/manifests"},{"name":"v0.33.0","sha":"a27907659d6c43f5bef2f76a9e381f2bf697a64f","kind":"commit","published_at":"2021-12-16T13:55:53.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.33.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.33.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.33.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.33.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.33.0/manifests"},{"name":"v0.32.2","sha":"727b84ce0da67a35899e966eb4408b3e6553ed63","kind":"commit","published_at":"2021-12-14T17:17:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.32.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.2/manifests"},{"name":"v0.32.1","sha":"d3804d1a827c9b1fa9867208de1167a9e62c6e99","kind":"commit","published_at":"2021-12-14T01:49:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.32.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.1/manifests"},{"name":"v0.32.0","sha":"da0b17b719b6d5cabe0819d44f90755c73312de8","kind":"commit","published_at":"2021-12-08T21:25:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.32.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.0/manifests"},{"name":"v0.31.0","sha":"22c4b275e73d70807fca8017d4896d8398b3373f","kind":"commit","published_at":"2021-12-03T16:12:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.31.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.31.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.31.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.31.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.31.0/manifests"},{"name":"v0.30.1","sha":"45ea4177e8a37a56798bacf89c4b6cdd5d056d6e","kind":"commit","published_at":"2021-11-15T19:41:46.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.30.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.30.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.30.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.30.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.30.1/manifests"},{"name":"v0.29.0","sha":"a2882ee810edcbf4db3230e982c316b261eb17cd","kind":"commit","published_at":"2021-10-29T16:00:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.29.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.29.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.29.0/manifests"},{"name":"v0.28.0","sha":"3286a4d4cc88e02e81db4f07d21a9fc6edac2a01","kind":"commit","published_at":"2021-10-28T19:41:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.28.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.28.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.28.0/manifests"},{"name":"v0.27.0","sha":"89242e6ed32528132ac79635a856b7a04a77014f","kind":"commit","published_at":"2021-10-21T18:34:17.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.27.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.27.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.27.0/manifests"},{"name":"v0.26.0","sha":"7a005fec0698a405a618242557e03ceebe1ee650","kind":"commit","published_at":"2021-10-15T17:26:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.26.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.26.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.26.0/manifests"},{"name":"v0.25.0","sha":"b25f5b664b21837aee9130d2e63812431bc64a40","kind":"commit","published_at":"2021-10-07T19:18:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.25.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.25.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.25.0/manifests"},{"name":"v0.24.1","sha":"0395c4744581a3d33bf80656f092b19dd75b32fb","kind":"commit","published_at":"2021-09-27T22:31:59.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.24.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.24.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.24.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.1/manifests"},{"name":"v0.24.0","sha":"6d4d083acccc68455e09dd45a474b3f6b5215006","kind":"commit","published_at":"2021-09-23T00:55:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.24.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.24.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.0/manifests"},{"name":"v0.23.0","sha":"ddfc8e20c0f370d25e7d032b23bef2e3d519506c","kind":"commit","published_at":"2021-09-13T17:06:23.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.23.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.23.0/manifests"},{"name":"v0.22.0","sha":"06dcd3261dadf77ec0d86e7a981eb4aac7008d09","kind":"commit","published_at":"2021-09-03T21:29:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.22.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.22.0/manifests"},{"name":"v0.21.0","sha":"ff828fbac211e1d9e993c309461bd9e0636fc2ec","kind":"commit","published_at":"2021-08-20T17:50:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.21.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.21.0/manifests"},{"name":"v0.20.0","sha":"b0e9b92a257f920bf6b31438a1dba6762fa7390d","kind":"commit","published_at":"2021-08-18T15:00:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.20.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.20.0/manifests"},{"name":"v0.19.1","sha":"fee35dd1753308fc887da744de5d0c66947c7493","kind":"commit","published_at":"2021-06-30T17:10:00.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.19.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.1/manifests"},{"name":"v0.19.0","sha":"2de56c074917b159fdd76fc6b1da974b4c53ca2e","kind":"commit","published_at":"2021-06-29T22:16:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.19.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.0/manifests"},{"name":"v0.18.0","sha":"962e82297c329f728018335858ad619ef3e00648","kind":"commit","published_at":"2021-06-29T18:28:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.18.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.18.0/manifests"},{"name":"v0.17.1","sha":"6dd698d89edee65fdcb7c0b2630b6253ed34deba","kind":"commit","published_at":"2021-06-19T18:32:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.17.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.17.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.17.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.1/manifests"},{"name":"v0.17.0","sha":"801e662633304256a05988c868234a2d0ed5a1ae","kind":"commit","published_at":"2021-06-04T16:50:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.17.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.0/manifests"},{"name":"v0.16.1","sha":"8be0d988e7e793d62afd2e9e2a881428322329cb","kind":"commit","published_at":"2021-05-25T21:13:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.16.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.1/manifests"},{"name":"v0.16.0","sha":"80e23bdb506835cdfe26780abcfd977363bae015","kind":"commit","published_at":"2021-05-25T19:01:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.16.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.0/manifests"},{"name":"v0.15.2","sha":"baa859d2ed084eb7c3d5621a255ad6f277533276","kind":"commit","published_at":"2021-05-12T21:28:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.2/manifests"},{"name":"v0.15.1","sha":"032cecbe7f19ca6f6f07d80f8dc902530e4c7502","kind":"commit","published_at":"2021-04-22T20:38:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"1632fdd85ebe8692328ce82b8ac3a3849dbdc315","kind":"commit","published_at":"2021-04-22T19:56:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.0/manifests"},{"name":"v0.14.0","sha":"26a4dd36a8932c7867fcdd6296f50643be30f8a6","kind":"commit","published_at":"2021-03-20T16:23:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.14.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.14.0/manifests"},{"name":"v0.13.1","sha":"40e9c4b146b2cf52112619969f18453ce7fa3234","kind":"commit","published_at":"2021-02-26T20:59:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.13.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.13.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.1/manifests"},{"name":"v0.13.0","sha":"6d5ff0fd8e7c39c95d30c960c8ae6e95b91cd9d0","kind":"commit","published_at":"2021-02-25T18:47:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.13.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.0/manifests"},{"name":"v0.12.7","sha":"c5e3b631ac354a6b22d912c6ed8972a433b02eae","kind":"commit","published_at":"2021-02-17T13:14:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.7","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.7/manifests"},{"name":"v0.12.6","sha":"8d838b18a85d2c2f0ee976cf2af491913dbcf98b","kind":"commit","published_at":"2021-02-05T16:26:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.6/manifests"},{"name":"v0.12.5","sha":"b22fd987db989debd8e880e7dfe934d39fd016f3","kind":"commit","published_at":"2021-02-01T17:03:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.5/manifests"},{"name":"v0.12.4","sha":"407769e88cdb5232b72aa573d9643e6624b92743","kind":"commit","published_at":"2021-01-27T16:51:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.4/manifests"},{"name":"v0.12.3","sha":"7bcdafe745a58592552393f8cb32f2d58982aa21","kind":"commit","published_at":"2021-01-22T21:10:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.3/manifests"},{"name":"v0.12.2","sha":"0f6288881bf8db287e07576bf8dd067184745759","kind":"commit","published_at":"2021-01-06T02:32:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.2/manifests"},{"name":"v0.12.1","sha":"bb70b0b43ee794c97266cc352a37804f2068acd2","kind":"commit","published_at":"2021-01-05T00:45:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"37b96a241b043f09f6cfee145c19b425e858f939","kind":"commit","published_at":"2021-01-04T21:50:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.0/manifests"},{"name":"v0.11.1","sha":"e299a5355fffa8a200f7076befeaf4a494d495f7","kind":"commit","published_at":"2020-12-23T18:23:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.11.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.1/manifests"},{"name":"v0.11.0","sha":"6aaf9ee712f41c38eefe17a07a1aa43cac9e7990","kind":"commit","published_at":"2020-12-18T21:59:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.11.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"52bac6e2fd1adb3d8852f0fab6536a81ec037b89","kind":"commit","published_at":"2020-12-10T03:20:53.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.10.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.10.0/manifests"},{"name":"v0.9.2","sha":"f87c59b4eb5d5b1396dcc8ad06a07a0706c4b7c5","kind":"commit","published_at":"2020-12-03T21:32:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.9.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.2/manifests"},{"name":"v0.9.1","sha":"6f9ded60ed144de3e837effdee5d96366441e7d3","kind":"commit","published_at":"2020-12-02T12:50:31.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.1/manifests"},{"name":"v0.9.0","sha":"ae71b8832d16b70b0373a518877d169659f07bd9","kind":"commit","published_at":"2020-11-30T16:37:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"71939557e6164712accfd0f7486ef4a6c8459656","kind":"commit","published_at":"2020-11-17T18:21:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.8.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.8.0/manifests"},{"name":"v0.7.1","sha":"dad1d9691c355c643eb3a7f1be1cadde36d913c7","kind":"commit","published_at":"2020-11-12T14:36:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.7.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"9581a0309b570d38037962598d4c30c8d028aaa2","kind":"commit","published_at":"2020-11-11T20:15:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.7.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"b3098f3423d11fe10ea18138177258f6d837d379","kind":"commit","published_at":"2020-11-09T19:18:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.6.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"ecfc471ce51a2a84ec144263592c223816241c7a","kind":"commit","published_at":"2020-11-04T20:47:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.5.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"773581704c736925a7a5485c18bde3f8129f1238","kind":"commit","published_at":"2020-10-30T19:14:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.5.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"f19cb03aa07891e433b5e2e6faa956bc9de83bcf","kind":"commit","published_at":"2020-10-26T15:19:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.4.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"15e2e32103b9aaf6d816fa2c6d9b9dc94ba8c16b","kind":"commit","published_at":"2020-10-23T15:06:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.4.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"1bf1e643ebb49fac1f2f30c1a13ff8b056dec938","kind":"commit","published_at":"2020-10-15T18:41:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.3.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.3.0/manifests"},{"name":"v0.2.0","sha":"956af57d3b8e23d5c607f486b0b65a760a602aad","kind":"commit","published_at":"2020-10-08T18:37:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.2.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"5adfce19e0abdfb0d2c62c80713b90f681c83bf4","kind":"commit","published_at":"2020-09-29T20:33:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0/manifests"},{"name":"v0.1.0-beta.5","sha":"8b81c87d18da91d2a5c8f10fdfb93ec3e05aa1f6","kind":"commit","published_at":"2020-09-26T02:59:19.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.5/manifests"},{"name":"v0.1.0-beta.4","sha":"676544b6ab7a5b70af7c2d3d2d34b23c50996900","kind":"commit","published_at":"2020-08-10T22:28:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.4/manifests"},{"name":"v0.1.0-beta.3","sha":"2d452bf59e0f44de6051ac3f316c8afafe0a929a","kind":"commit","published_at":"2020-08-10T14:33:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.3/manifests"},{"name":"v0.1.0-beta.2","sha":"06f8355fce7901bf88493323831b235ef068dc4a","kind":"commit","published_at":"2020-07-27T19:13:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.2/manifests"},{"name":"v0.1.0-beta.1","sha":"19eadde9ca03c89f7325b8ff09ba8114abbe4dcf","kind":"commit","published_at":"2020-07-27T13:55:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.1/manifests"}]},"repo_metadata_updated_at":"2026-08-07T23:36:10.602Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":14.60656632613273,"stargazers_count":null,"forks_count":null,"average":7.303283163066365},"purl":"pkg:apk/alpine/syft-fish-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=edge","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-fish-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-fish-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-fish-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-22T11:00:46.375Z","issues_count":731,"pull_requests_count":2255,"avg_time_to_close_issue":13448535.886297377,"avg_time_to_close_pull_request":877371.7434279706,"issues_closed_count":343,"pull_requests_closed_count":1902,"pull_request_authors_count":150,"issue_authors_count":381,"avg_comments_per_issue":2.1299589603283176,"avg_comments_per_pull_request":0.5197339246119734,"merged_pull_requests_count":1710,"bot_issues_count":11,"bot_pull_requests_count":1193,"past_year_issues_count":194,"past_year_pull_requests_count":931,"past_year_avg_time_to_close_issue":1820259.3389830508,"past_year_avg_time_to_close_pull_request":292805.3951612903,"past_year_issues_closed_count":59,"past_year_pull_requests_closed_count":744,"past_year_pull_request_authors_count":63,"past_year_issue_authors_count":127,"past_year_avg_comments_per_issue":0.9536082474226805,"past_year_avg_comments_per_pull_request":0.32438238453276047,"past_year_bot_issues_count":7,"past_year_bot_pull_requests_count":593,"past_year_merged_pull_requests_count":666,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft-fish-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft-fish-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft-fish-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft-fish-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft-fish-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft-fish-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":"michal@polanski.me","url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":478,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2023-04-01T19:50:32.435Z","updated_at":"2023-04-01T19:50:32.435Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-edge","url":"https://pkgs.alpinelinux.org/packages?branch=edge","ecosystem":"alpine","default":false,"packages_count":39886,"maintainers_count":902,"namespaces_count":3,"keywords_count":6588,"github":"alpinelinux","metadata":{"repos":["main","community","testing"],"funded_packages_count":2846},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.616Z","updated_at":"2026-08-10T05:07:40.402Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/namespaces"}},{"id":7257463,"name":"syft-zsh-completion","ecosystem":"alpine","description":"Zsh completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":69,"first_release_published_at":"2023-04-01T18:45:50.000Z","latest_release_published_at":"2026-07-13T21:50:10.000Z","latest_release_number":"1.46.0-r0","last_synced_at":"2026-07-14T03:29:09.275Z","created_at":"2023-04-01T19:15:30.055Z","updated_at":"2026-08-07T23:36:11.658Z","registry_url":"https://pkgs.alpinelinux.org/package/edge/community/x86_64/syft-zsh-completion","install_command":"apk add syft-zsh-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2025-10-20T14:22:16.000Z","size":23003,"stargazers_count":7796,"open_issues_count":500,"forks_count":720,"subscribers_count":62,"default_branch":"main","last_synced_at":"2025-10-20T16:13:38.101Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2025-10-20T14:24:07.000Z","dependencies_parsed_at":"2023-12-20T09:43:51.606Z","dependency_job_id":"3d1fd421-c43b-4d60-87a0-71ec0266d70f","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":240,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":280449175,"owners_count":26332601,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-22T02:00:06.515Z","response_time":63,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"anchore","name":"Anchore, Inc.","uuid":"16208487","kind":"organization","description":"","email":"info@anchore.com","website":"https://anchore.com/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16208487?v=4","repositories_count":43,"last_synced_at":"2023-03-02T09:35:13.089Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/anchore","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-13T02:25:02.273Z","updated_at":"2023-03-02T09:35:13.093Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore/repositories"},"tags":[{"name":"v1.34.2","sha":"0c98a364d503789ff8d7f122763bb8748de9772f","kind":"tag","published_at":"2025-10-16T12:19:26.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.34.2","html_url":"https://github.com/anchore/syft/releases/tag/v1.34.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.34.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.2/manifests"},{"name":"v1.34.1","sha":"e9a8bc5ab97f94b7f9210d7a0f4a981cdbb22232","kind":"tag","published_at":"2025-10-15T15:27:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.34.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.34.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.34.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.1/manifests"},{"name":"v1.34.0","sha":"6d790ec6ec98b263dae0c54259859b35c3527e1b","kind":"tag","published_at":"2025-10-14T22:25:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.34.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.34.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.34.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.0/manifests"},{"name":"v1.33.0","sha":"b87b9191497c2d410b42c05591347d428129fd2a","kind":"tag","published_at":"2025-09-15T20:38:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.33.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.33.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.33.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.33.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.33.0/manifests"},{"name":"v1.32.0","sha":"2d8e337d3469712c7d92770792f0117ad82c4ad3","kind":"tag","published_at":"2025-08-26T21:47:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.32.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.32.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.32.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.32.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.32.0/manifests"},{"name":"v1.31.0","sha":"ab9db0024ed35ab6a4e33e539593f5a3c58a5594","kind":"tag","published_at":"2025-08-13T14:50:45.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.31.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.31.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.31.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.31.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.31.0/manifests"},{"name":"v1.30.0","sha":"49736e7c4acd3cb1aed2d3a8c8cdcd696ac77166","kind":"tag","published_at":"2025-08-08T18:21:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.30.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.30.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.30.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.30.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.30.0/manifests"},{"name":"v1.29.1","sha":"386ef842d99a72027fb5fd1085fde87883640eaf","kind":"tag","published_at":"2025-07-30T18:16:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.29.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.29.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.29.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.1/manifests"},{"name":"v1.29.0","sha":"6f36b586ba1cc49074573d07ca397d18e9eecd16","kind":"tag","published_at":"2025-07-21T19:36:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.29.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.29.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.0/manifests"},{"name":"v1.28.0","sha":"e8b62ab9aca2e896ab608c118619c5a7831bc737","kind":"tag","published_at":"2025-07-02T16:25:07.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.28.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.28.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.28.0/manifests"},{"name":"v1.27.1","sha":"10f06317104361183b4cb803c0e6ac1727257551","kind":"tag","published_at":"2025-06-12T13:39:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.27.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.27.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.27.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.1/manifests"},{"name":"v1.27.0","sha":"18f9b5ab58aa04dda61a3eed8123bd89470befe9","kind":"tag","published_at":"2025-06-09T18:36:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.27.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.27.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.0/manifests"},{"name":"v1.26.1","sha":"7bfb4c86a6d7e5343c45c2844a232b6c7ba4c51c","kind":"tag","published_at":"2025-05-22T12:36:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.26.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.26.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.26.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.1/manifests"},{"name":"v1.26.0","sha":"ac883f52edb8ca1f5a0a61d12c288d4b34ea3897","kind":"tag","published_at":"2025-05-20T21:27:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.26.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.26.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.0/manifests"},{"name":"v1.25.1","sha":"db77b54c019c9aae142d13ca642ddb56d0deefa6","kind":"tag","published_at":"2025-05-16T18:53:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.25.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.25.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.25.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.1/manifests"},{"name":"v1.25.0","sha":"2d4fe513ecec7af9626b9dada586c7a0ff63a67d","kind":"tag","published_at":"2025-05-16T16:29:38.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.25.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.25.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.0/manifests"},{"name":"v1.24.0","sha":"3c7018a853ab7b311db9ff70e1cf3113b46d9c0c","kind":"tag","published_at":"2025-05-14T14:51:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.24.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.24.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.24.0/manifests"},{"name":"v1.23.1","sha":"a714fb8391471c6ddf6e583229d982d1316d64a8","kind":"tag","published_at":"2025-04-25T14:52:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.23.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.23.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.23.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.1/manifests"},{"name":"v1.23.0","sha":"4211d796672ab21250a4d6fd8e45204d6dc00d0e","kind":"tag","published_at":"2025-04-24T20:16:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.23.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.0/manifests"},{"name":"v1.22.0","sha":"9ab83874ed21c07479d8eeddd88a6894e1ff8537","kind":"tag","published_at":"2025-04-01T14:37:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.22.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.22.0/manifests"},{"name":"v1.21.0","sha":"7bdbfc04781a18827c30a505d64a8671c9827bd7","kind":"tag","published_at":"2025-03-17T18:52:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.21.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.21.0/manifests"},{"name":"v1.20.0","sha":"46522bcc5dff8b65b61a7cda1393abe515802306","kind":"tag","published_at":"2025-02-21T20:44:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.20.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.20.0/manifests"},{"name":"v1.19.0","sha":"222e6548a96f8c80015c1d24f01dea3052a04893","kind":"tag","published_at":"2025-01-22T19:57:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.19.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.19.0/manifests"},{"name":"v1.18.1","sha":"5e16e5031a13f8a11057feb8544decebfc43b4ed","kind":"tag","published_at":"2024-12-13T18:41:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.18.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.18.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.18.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.1/manifests"},{"name":"v1.18.0","sha":"d38efb0b7fb7106909bc532a4efc68b78a917a34","kind":"tag","published_at":"2024-12-09T21:02:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.18.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.0/manifests"},{"name":"v1.17.0","sha":"a8d4202d77b6b31e75ce5af09a8b03ad14e533d3","kind":"tag","published_at":"2024-11-21T14:39:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.17.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.17.0/manifests"},{"name":"v1.16.0","sha":"8a41d772509d37267a65e0b425808e883e4b9dce","kind":"tag","published_at":"2024-11-04T22:29:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.16.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.16.0/manifests"},{"name":"v1.15.0","sha":"55cc1877ef246d8cabfd9bbeb0a8747b59c03431","kind":"tag","published_at":"2024-10-28T21:11:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.15.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.15.0/manifests"},{"name":"v1.14.2","sha":"e4e985b9b05b9570648399adf292ab7f659b4cef","kind":"tag","published_at":"2024-10-21T17:20:27.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.14.2","html_url":"https://github.com/anchore/syft/releases/tag/v1.14.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.14.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.2/manifests"},{"name":"v1.14.1","sha":"754cebee6414c614acf03ee0f87abfcf6176e051","kind":"tag","published_at":"2024-10-15T13:04:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.14.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.14.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.14.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.1/manifests"},{"name":"v1.14.0","sha":"ccbee94b876240284c25c8931c6233fc71a5b7fb","kind":"tag","published_at":"2024-10-07T20:40:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.14.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.0/manifests"},{"name":"v1.13.0","sha":"01de99b25304ec95197c00b21d698f127b31a887","kind":"tag","published_at":"2024-09-24T13:28:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.13.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.13.0/manifests"},{"name":"v1.12.2","sha":"fcd5ec951de6b3fc1f1aa2a36968356d2eb22170","kind":"tag","published_at":"2024-09-11T14:12:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.12.2","html_url":"https://github.com/anchore/syft/releases/tag/v1.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.2/manifests"},{"name":"v1.12.1","sha":"c33a51d3d839ba619ea2217ee00a56be23f9fb9f","kind":"tag","published_at":"2024-09-10T20:42:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.12.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.1/manifests"},{"name":"v1.12.0","sha":"dbc4238f63c027efc09ce5fe51e069c1145f6846","kind":"tag","published_at":"2024-09-10T17:37:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.12.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.0/manifests"},{"name":"v1.11.1","sha":"95b4a88256bddebb91831250f28f602f8c36552a","kind":"tag","published_at":"2024-08-20T16:25:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.11.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.1/manifests"},{"name":"v1.11.0","sha":"19cc664cf8e7020dd692a62efcbba98ab670bde9","kind":"tag","published_at":"2024-08-09T17:52:21.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.11.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.0/manifests"},{"name":"v1.10.0","sha":"a4b5dcd0df80f6a58c8610e25104647710c1da5d","kind":"tag","published_at":"2024-07-30T16:13:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.10.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.10.0/manifests"},{"name":"v1.9.0","sha":"4e09908ba124dca7e6f1f6e7dc4f4663fae658ca","kind":"tag","published_at":"2024-07-11T17:32:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.9.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.9.0/manifests"},{"name":"v1.8.0","sha":"1eae9333a9450c135ff929578597c79b01c9f5ff","kind":"tag","published_at":"2024-06-24T15:43:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.8.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.8.0/manifests"},{"name":"v1.7.0","sha":"22d57314826fce1bff469d8173884489f8212925","kind":"tag","published_at":"2024-06-14T19:48:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.7.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.7.0/manifests"},{"name":"v1.6.0","sha":"c43f4fb416c34c1c4b3997373689d8d4c0fb9b36","kind":"tag","published_at":"2024-06-10T15:39:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.6.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"ac34808b9c55bb274b1205f9b5d9cf495239577d","kind":"tag","published_at":"2024-05-28T15:11:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.5.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.5.0/manifests"},{"name":"v1.4.1","sha":"c200896a9644f9b6bd4bc3785c848276c33bb53c","kind":"tag","published_at":"2024-05-09T19:45:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.4.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.1/manifests"},{"name":"v1.4.0","sha":"4194a2cd34d2f15dd9a96774ba2fbc5463db4c58","kind":"tag","published_at":"2024-05-09T18:14:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.4.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"87cd6c8c48239a20c413f6461e90000ff30ee601","kind":"tag","published_at":"2024-04-26T15:01:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.3.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"dde5d349b1eef740c285255e6a9e3a8f5c9938e1","kind":"tag","published_at":"2024-04-12T18:31:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.2.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.2.0/manifests"},{"name":"v1.1.1","sha":"1e31356c49bf2c30fd80c833482e1fbe4133ff83","kind":"tag","published_at":"2024-04-04T14:52:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.1.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"f4e18961b979f5e6d0cc3b1e4fce608c8ceb29d8","kind":"tag","published_at":"2024-03-25T21:41:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.1.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"1b121ac3f4d589060ddf1fac0bcd6871ea4731e3","kind":"tag","published_at":"2024-03-06T19:51:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.0.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"356f7c92b464b69be3a2a898cd98a63037eeadcc","kind":"tag","published_at":"2024-02-29T14:50:50.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.0.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.0/manifests"},{"name":"v0.105.1","sha":"928511ea0f1449e057e8057e38743d258b22476b","kind":"tag","published_at":"2024-02-26T16:52:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.105.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.105.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.105.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.1/manifests"},{"name":"v0.105.0","sha":"65cadda48653d2452a7e41a47a60d2934e8fcb07","kind":"tag","published_at":"2024-02-14T21:16:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.105.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.105.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.105.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.0/manifests"},{"name":"v0.104.0","sha":"bd0cb916df4376a06e56ef7f3cc0da6659d7c2c6","kind":"tag","published_at":"2024-02-07T20:51:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.104.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.104.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.104.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.104.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.104.0/manifests"},{"name":"v0.103.1","sha":"377538e4a692b8070716eb091456b112ccc2cb81","kind":"tag","published_at":"2024-01-31T17:09:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.103.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.103.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.103.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.1/manifests"},{"name":"v0.103.0","sha":"bbe7fa180a38079318fd4a75d6276720374ccecd","kind":"tag","published_at":"2024-01-31T16:34:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.103.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.103.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.103.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.0/manifests"},{"name":"v0.102.0","sha":"d7c51e5c82de8b64b992f5962842c20903b5934a","kind":"tag","published_at":"2024-01-26T14:34:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.102.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.102.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.102.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.102.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.102.0/manifests"},{"name":"v0.101.1","sha":"3eab5932e5271eea5506ab9710239b1415c827f8","kind":"tag","published_at":"2024-01-19T22:02:00.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.101.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.101.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.101.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.1/manifests"},{"name":"v0.101.0","sha":"297ece69045d6d73a184ed955a99d90769b1cb45","kind":"tag","published_at":"2024-01-17T20:41:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.101.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.101.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.101.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.0/manifests"},{"name":"v0.100.0","sha":"a16a4ad6c993aaaa1ec502667c215b0e8c8e51ff","kind":"tag","published_at":"2024-01-05T21:33:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.100.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.100.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.100.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.100.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.100.0/manifests"},{"name":"v0.99.0","sha":"3cffa0b7fd276a35123c48e45407c4f402f2c58f","kind":"tag","published_at":"2023-12-21T16:18:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.99.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.99.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.99.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.99.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.99.0/manifests"},{"name":"v0.98.0","sha":"5c8dd4c3a7632dcfd999bab7a5b73c3180f1b628","kind":"tag","published_at":"2023-11-29T14:52:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.98.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.98.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.98.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.98.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.98.0/manifests"},{"name":"v0.97.1","sha":"7cfb5f630a7a2105d49d65eaaaa2e2c06e4eda73","kind":"tag","published_at":"2023-11-17T21:03:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.97.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.97.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.97.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.1/manifests"},{"name":"v0.97.0","sha":"1c787f436fca20cbec4541f978ed2a634b880c97","kind":"tag","published_at":"2023-11-16T22:56:21.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.97.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.97.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.97.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.0/manifests"},{"name":"v0.96.0","sha":"0891d35e0774f175e3a3f170edcce9ad2f4f015b","kind":"tag","published_at":"2023-11-09T14:04:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.96.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.96.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.96.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.96.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.96.0/manifests"},{"name":"v0.95.0","sha":"9b98785aab9346999a0b5e9f5e4b4e63a1b1916c","kind":"tag","published_at":"2023-11-07T16:43:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.95.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.95.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.95.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.95.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.95.0/manifests"},{"name":"v0.94.0","sha":"8f6bdde6662aa8050a71eadbdb7bd5a3b079a56d","kind":"tag","published_at":"2023-10-20T17:21:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.94.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.94.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.94.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.94.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.94.0/manifests"},{"name":"v0.93.0","sha":"0748945c8341a06415ac80e624b84e8d3f548d39","kind":"tag","published_at":"2023-10-10T17:27:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.93.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.93.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.93.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.93.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.93.0/manifests"},{"name":"v0.92.0","sha":"8f57d22f639e132cbd87324abacd864232c611ce","kind":"tag","published_at":"2023-09-27T15:40:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.92.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.92.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.92.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.92.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.92.0/manifests"},{"name":"v0.91.0","sha":"b7fa75d7f82a6816d307805ac07e6965c799e938","kind":"tag","published_at":"2023-09-20T19:41:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.91.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.91.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.91.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.91.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.91.0/manifests"},{"name":"v0.90.0","sha":"b82c0ffc3417bdc8c38f4633af95a668ec29fa35","kind":"commit","published_at":"2023-09-11T16:12:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.90.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.90.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.90.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.90.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.90.0/manifests"},{"name":"v0.89.0","sha":"b454160549bbd199e0a5693750856f30b41767f7","kind":"commit","published_at":"2023-08-31T14:50:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.89.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.89.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.89.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.89.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.89.0/manifests"},{"name":"v0.88.0","sha":"dd09e0362e46bee7285e0fca5ed96e398c314380","kind":"commit","published_at":"2023-08-25T20:45:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.88.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.88.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.88.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.88.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.88.0/manifests"},{"name":"v0.87.1","sha":"4762ba0943785fe778276893388e839e01787b45","kind":"commit","published_at":"2023-08-17T16:55:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.87.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.87.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.87.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.1/manifests"},{"name":"v0.87.0","sha":"b3d7ba569b64376cf33df717e3bc40d8375e033b","kind":"commit","published_at":"2023-08-14T15:37:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.87.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.87.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.87.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.0/manifests"},{"name":"v0.86.1","sha":"e2f7befbfbf88053dfb2007c6499a4bb2d232c3c","kind":"commit","published_at":"2023-07-31T17:29:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.86.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.86.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.86.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.1/manifests"},{"name":"v0.86.0","sha":"f14742b3f3a6f8cd4bc696dbafee53ab1d665da7","kind":"commit","published_at":"2023-07-31T16:02:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.86.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.86.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.86.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.0/manifests"},{"name":"v0.85.0","sha":"4fc17edd146af34ab06f5b0443ef8ddac3aaf076","kind":"commit","published_at":"2023-07-12T17:14:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.85.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.85.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.85.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.85.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.85.0/manifests"},{"name":"v0.84.1","sha":"791d1f955215f1dad383c9835e4d3c01267dc0f5","kind":"commit","published_at":"2023-06-28T16:05:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.84.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.84.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.84.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.1/manifests"},{"name":"v0.84.0","sha":"5d54e6e847192f63db80c9a7ee23197476c632ce","kind":"commit","published_at":"2023-06-20T16:08:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.84.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.84.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.84.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.0/manifests"},{"name":"v0.83.1","sha":"a1bba36d514c3ff0f34635b9cdc9f07a92ea793b","kind":"commit","published_at":"2023-06-14T15:45:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.83.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.83.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.83.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.1/manifests"},{"name":"v0.83.0","sha":"1764e1c3f6bd66781f8350d957a1f95e4d9ad3de","kind":"commit","published_at":"2023-06-05T19:04:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.83.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.83.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.83.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.0/manifests"},{"name":"v0.82.0","sha":"4ac8fdf6df0da4cd6f76820dbec9f490ee56bcba","kind":"commit","published_at":"2023-05-23T16:58:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.82.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.82.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.82.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.82.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.82.0/manifests"},{"name":"v0.81.0","sha":"334a775cb9cd6bf50033de1bb3aa04f46b669f5d","kind":"commit","published_at":"2023-05-19T14:21:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.81.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.81.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.81.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.81.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.81.0/manifests"},{"name":"v0.80.0","sha":"0f1aed447751f92dcc0165b56aa474ec9706805e","kind":"commit","published_at":"2023-05-05T15:41:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.80.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.80.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.80.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.80.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.80.0/manifests"},{"name":"v0.79.0","sha":"b2b332e8b2b66af0905e98b54ebd713a922be1a8","kind":"commit","published_at":"2023-04-21T13:34:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.79.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.79.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.79.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.79.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.79.0/manifests"},{"name":"v0.78.0","sha":"244b797a199458f504758c0e3a775572a021e629","kind":"commit","published_at":"2023-04-17T16:26:07.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.78.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.78.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.78.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.78.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.78.0/manifests"},{"name":"v0.77.0","sha":"dd30c99bc2439cb91e3d084eb21e1040dd5a54dc","kind":"commit","published_at":"2023-04-11T14:13:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.77.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.77.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.77.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.77.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.77.0/manifests"},{"name":"v0.76.1","sha":"7845381331e873f65fd5013f44b7d85168ced5f5","kind":"commit","published_at":"2023-04-05T17:59:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.76.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.76.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.76.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.1/manifests"},{"name":"v0.76.0","sha":"dfcc07e5122217ca9e2fc75817c593356fc0c405","kind":"commit","published_at":"2023-03-31T14:04:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.76.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.76.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.76.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.0/manifests"},{"name":"v0.75.0","sha":"cc0a376aba43e7f9c5fe66320643f72088533838","kind":"commit","published_at":"2023-03-13T17:26:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.75.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.75.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.75.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.75.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.75.0/manifests"},{"name":"v0.74.1","sha":"41cbbe09b205e3b80e8a57d4f7a509b5f938557d","kind":"commit","published_at":"2023-03-07T17:54:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.74.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.74.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.74.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.1/manifests"},{"name":"v0.74.0","sha":"5f90d0371873faf5eb8f2e748909b32294be6263","kind":"commit","published_at":"2023-03-01T20:35:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.74.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.74.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.74.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.0/manifests"},{"name":"v0.72.1","sha":"be71f7c6aea3fd663e0f059df1d8060c2f6e916d","kind":"commit","published_at":"2023-02-22T21:34:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.72.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.72.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.72.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.1/manifests"},{"name":"v0.73.0","sha":"aa151da5fe2a1b11502c852fd2d3ad462c1d245f","kind":"commit","published_at":"2023-02-22T19:08:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.73.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.73.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.73.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.73.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.73.0/manifests"},{"name":"v0.72.0","sha":"2642a3616170ccbda9d8c8cb4f4a6b0fd5c63da9","kind":"commit","published_at":"2023-02-16T15:22:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.72.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.72.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.72.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.0/manifests"},{"name":"v0.71.0","sha":"88c81d33edc67b0b9636d0046417a9373ac8b74f","kind":"commit","published_at":"2023-02-09T16:35:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.71.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.71.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.71.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.71.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.71.0/manifests"},{"name":"v0.70.0","sha":"9995950c70e849f9921919faffbfcf46401f71f3","kind":"commit","published_at":"2023-02-03T18:06:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.70.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.70.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.70.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.70.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.70.0/manifests"},{"name":"v0.69.1","sha":"1530ef354ffaf59cef6a02c949f2cdb82353954f","kind":"commit","published_at":"2023-01-31T16:53:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.69.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.69.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.69.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.1/manifests"},{"name":"v0.69.0","sha":"b81c9805dcc9bf25dad7659fd9c2bbf7dd3f3d90","kind":"commit","published_at":"2023-01-30T18:47:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.69.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.69.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.69.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.0/manifests"},{"name":"v0.68.1","sha":"4c0aef09b8d7fb78200b04416f474b90b79370de","kind":"commit","published_at":"2023-01-25T17:18:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.68.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.68.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.68.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.1/manifests"},{"name":"v0.68.0","sha":"e58050bac045be672621047d5699b88884e2da62","kind":"commit","published_at":"2023-01-20T14:49:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.68.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.68.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.68.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.0/manifests"},{"name":"v0.66.2","sha":"03971ace43b877e371c13e3f786c1f6c3a4ec507","kind":"commit","published_at":"2023-01-17T21:26:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.66.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.2/manifests"},{"name":"v0.66.1","sha":"ac94bf530c7b1e6ee5df1ed0f9f6454fca8bc918","kind":"commit","published_at":"2023-01-12T22:42:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.66.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.1/manifests"},{"name":"v0.66.0","sha":"260cb4c72d001b63e7462ed214caeb0aab605714","kind":"commit","published_at":"2023-01-12T20:03:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.66.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.0/manifests"},{"name":"v0.65.0","sha":"bc1edb9c8a2fb4824bfdcac6147edc2bbf47aaf6","kind":"commit","published_at":"2023-01-04T16:34:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.65.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.65.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.65.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.65.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.65.0/manifests"},{"name":"v0.64.0","sha":"e1e489a2849c8432781a7cb58b257fa935efa1cf","kind":"commit","published_at":"2022-12-23T13:37:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.64.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.64.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.64.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.64.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.64.0/manifests"},{"name":"v0.63.0","sha":"23a3173c9f2461e5906d1b9e3ac20b4806d74777","kind":"commit","published_at":"2022-12-12T17:55:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.63.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.63.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.63.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.63.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.63.0/manifests"},{"name":"v0.62.3","sha":"247b054ab56f848c477495218754166272f470b5","kind":"commit","published_at":"2022-11-30T16:11:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.3/manifests"},{"name":"v0.62.2","sha":"0cbd0cc70377d5b1b11b808fbbf9ddec450c68ee","kind":"commit","published_at":"2022-11-28T15:43:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.2/manifests"},{"name":"v0.62.1","sha":"098e61dcc81d7a6d666bc62a2166c9b8f32c61bc","kind":"commit","published_at":"2022-11-21T14:26:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.1/manifests"},{"name":"v0.62.0","sha":"da4b2df57640e03f273a2e7e9b04eca40555e139","kind":"commit","published_at":"2022-11-18T18:42:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.0/manifests"},{"name":"v0.61.0","sha":"67888ee855ad37948bfee98e3aa7d592b4f91e95","kind":"commit","published_at":"2022-11-18T14:45:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.61.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.61.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.61.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.61.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.61.0/manifests"},{"name":"v0.60.3","sha":"bc9740d50a38e9660f2f98ed91d84c6d8799cf70","kind":"commit","published_at":"2022-11-03T14:38:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.3/manifests"},{"name":"v0.60.2","sha":"35f0f2931e310882fe7117c41d57a185d72ca498","kind":"commit","published_at":"2022-11-02T14:05:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.2/manifests"},{"name":"v0.60.1","sha":"ba57f3db5189c632ecaa02f9cf0b634c5a55099c","kind":"commit","published_at":"2022-11-01T16:28:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.1/manifests"},{"name":"v0.60.0","sha":"4c5c6f6319d931f324c3a15a88ba2593109cbbe2","kind":"commit","published_at":"2022-11-01T14:30:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.0/manifests"},{"name":"v0.59.0","sha":"41bc6bb410352845f22766e27dd48ba93aa825a4","kind":"commit","published_at":"2022-10-14T19:54:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.59.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.59.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.59.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.59.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.59.0/manifests"},{"name":"v0.58.0","sha":"b9b13d5525df89194d332467f692bc28bc68d07f","kind":"commit","published_at":"2022-09-29T18:45:59.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.58.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.58.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.58.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.58.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.58.0/manifests"},{"name":"v0.57.0","sha":"04d288b3643f906255af88108f27712bb2be5b63","kind":"commit","published_at":"2022-09-19T20:08:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.57.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.57.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.57.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.57.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.57.0/manifests"},{"name":"v0.56.0","sha":"c5dca001e267d2a91ff82e53ca72535ceef6af02","kind":"commit","published_at":"2022-09-09T18:59:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.56.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.56.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.56.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.56.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.56.0/manifests"},{"name":"v0.55.0","sha":"a7966a4d9d8155be788af33fe5e5af2e40043f82","kind":"commit","published_at":"2022-08-29T19:28:19.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.55.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.55.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.55.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.55.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.55.0/manifests"},{"name":"v0.54.0","sha":"21eb77206020c04c9ca5316562e32179c73926a9","kind":"commit","published_at":"2022-08-16T18:14:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.54.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.54.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.54.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.54.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.54.0/manifests"},{"name":"v0.53.4","sha":"69bde44c6e50a5838cdd2c2c821edb0111013178","kind":"commit","published_at":"2022-08-03T16:24:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.4/manifests"},{"name":"v0.53.3","sha":"042304ee4c614708b4e293f525c5d0a435ede2cf","kind":"commit","published_at":"2022-08-03T13:46:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.3/manifests"},{"name":"v0.53.2","sha":"69fb0a6f3bd6f0281e0d466ab7db23090a3ebc65","kind":"commit","published_at":"2022-08-02T19:25:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.2/manifests"},{"name":"v0.53.1","sha":"f5d02d4e527d3fe1906fd209ce036f58049979f3","kind":"commit","published_at":"2022-08-02T15:44:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.1/manifests"},{"name":"v0.53.0","sha":"b7f587f5dcae631b76d2f80ed2a3b9a207972d80","kind":"commit","published_at":"2022-08-02T13:42:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.0/manifests"},{"name":"v0.52.0","sha":"ba9adb17ebb510a2a3bd2b641738b1d9235e1f3e","kind":"commit","published_at":"2022-07-21T13:17:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.52.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.52.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.52.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.52.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.52.0/manifests"},{"name":"v0.51.0","sha":"470b13045bbbf150f3c79d1487a01ae6acc5592d","kind":"commit","published_at":"2022-07-11T14:09:08.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.51.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.51.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.51.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.51.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.51.0/manifests"},{"name":"v0.50.0","sha":"69134ed3b54bc8b1d86d868611f7d069ce3290a8","kind":"commit","published_at":"2022-07-05T15:57:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.50.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.50.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.50.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.50.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.50.0/manifests"},{"name":"v0.49.0","sha":"d5e12ff89c2d3af684152dd401618533a6f1b67e","kind":"commit","published_at":"2022-06-24T15:05:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.49.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.49.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.49.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.49.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.49.0/manifests"},{"name":"v0.48.1","sha":"03e37044d437294b0aac44a4e9277eb8f6c8be3f","kind":"commit","published_at":"2022-06-16T18:56:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.48.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.48.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.48.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.1/manifests"},{"name":"v0.48.0","sha":"9e72771b851f1657ade0c2214569f675cf0813f3","kind":"commit","published_at":"2022-06-16T14:43:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.48.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.48.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.48.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.0/manifests"},{"name":"v0.47.0","sha":"f15d4a9984428103a60e2298d0755b3adcc32a3a","kind":"commit","published_at":"2022-06-08T21:39:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.47.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.47.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.47.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.47.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.47.0/manifests"},{"name":"v0.46.3","sha":"7cb8e1fc14a278ec5afce379623a47577aba9917","kind":"commit","published_at":"2022-05-25T21:40:08.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.3/manifests"},{"name":"v0.46.2","sha":"d41afe05eb8fecd2906f5db9661910dbc99fc3dd","kind":"commit","published_at":"2022-05-19T20:10:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.2/manifests"},{"name":"v0.46.1","sha":"03ee4fdf5e87907c5a49ae353c44682894bb411c","kind":"commit","published_at":"2022-05-12T16:56:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.1/manifests"},{"name":"v0.46.0","sha":"91e2fd8532254216a83c80891611751d0c8fba7b","kind":"commit","published_at":"2022-05-11T22:35:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.0/manifests"},{"name":"v0.45.1","sha":"37927b8b23cac234289a73aa3e886675d463e477","kind":"commit","published_at":"2022-05-03T13:38:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.45.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.45.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.45.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.1/manifests"},{"name":"v0.45.0","sha":"36973021fad57baf443ffa88181394b87ce109a0","kind":"commit","published_at":"2022-04-29T15:18:45.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.45.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.45.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.45.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.0/manifests"},{"name":"v0.44.1","sha":"248023baafdf2a74f8bdaf98beaee3f40584bb7d","kind":"commit","published_at":"2022-04-15T17:00:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.44.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.44.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.44.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.1/manifests"},{"name":"v0.44.0","sha":"b46d044d7e3afc2ee09fd5ff26635f783628126e","kind":"commit","published_at":"2022-04-11T18:56:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.44.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.44.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.44.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.0/manifests"},{"name":"v0.43.2","sha":"e415bb21e7a609c12dc37a2d6395796fb675e3fe","kind":"commit","published_at":"2022-04-06T21:15:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.43.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.2/manifests"},{"name":"v0.43.1","sha":"748cfbf00647df3366ec3c4ad89d87762625da5a","kind":"commit","published_at":"2022-04-06T16:27:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.43.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.1/manifests"},{"name":"v0.43.0","sha":"f24bbc1838351e4e408368f3312c76db6552e71e","kind":"commit","published_at":"2022-03-31T19:45:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.43.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.0/manifests"},{"name":"v0.42.4","sha":"a7db43f5ec159cad98d0298a2375ee1f4c397894","kind":"commit","published_at":"2022-03-24T14:11:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.4/manifests"},{"name":"v0.42.3","sha":"cc2c0e57a0d02a1719b4e34d0793f09e9699c8b0","kind":"commit","published_at":"2022-03-23T18:34:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.3/manifests"},{"name":"v0.42.2","sha":"c0b547bdb239f00ef43b7f69a61813b710d0b221","kind":"commit","published_at":"2022-03-22T17:19:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.2/manifests"},{"name":"v0.42.1","sha":"283db88dc4d40502219c80af36d073b2f1556007","kind":"commit","published_at":"2022-03-21T18:59:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.1/manifests"},{"name":"v0.42.0","sha":"f4734d28b391800f824a89712897daf19237812c","kind":"commit","published_at":"2022-03-17T14:22:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.0/manifests"},{"name":"v0.41.6","sha":"ee0a1d172c0c6f0da907694b9b48870b33d2852d","kind":"commit","published_at":"2022-03-16T13:10:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.6/manifests"},{"name":"v0.41.5","sha":"b9b3ccecf9438f35977f8e8c6187bd616630640b","kind":"commit","published_at":"2022-03-15T17:02:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.5/manifests"},{"name":"v0.41.4","sha":"c7cf8b0b264562b463dd1f8d0ca7a6d1215ef41f","kind":"commit","published_at":"2022-03-11T18:17:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.4/manifests"},{"name":"v0.41.3","sha":"c7cf8b0b264562b463dd1f8d0ca7a6d1215ef41f","kind":"commit","published_at":"2022-03-11T18:17:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.3/manifests"},{"name":"v0.41.2","sha":"7789506dc65830c32f0bbc41e2be657f9fa473cd","kind":"commit","published_at":"2022-03-11T03:38:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.2/manifests"},{"name":"v0.41.1","sha":"07d3c9af52f241613971ccadd18c8f8ab67abc4e","kind":"commit","published_at":"2022-03-08T15:37:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.1/manifests"},{"name":"v0.41.0","sha":"5123f073c7e5b37a87287d5e9e4a01f4611b3eee","kind":"commit","published_at":"2022-03-07T17:37:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.0/manifests"},{"name":"v0.40.1","sha":"b2ab4671b915d50b523ae77b85e9554e5f8bcf95","kind":"commit","published_at":"2022-03-03T22:13:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.40.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.40.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.40.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.1/manifests"},{"name":"v0.40.0","sha":"1e75cb0418df15f8bc8193b1b8a3b3a8d81cb3b0","kind":"commit","published_at":"2022-03-02T15:09:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.40.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.40.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.40.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.0/manifests"},{"name":"v0.39.3","sha":"1d1a7de31457b0f2974090101cb793ee78eeb9b7","kind":"commit","published_at":"2022-02-26T12:30:38.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.3/manifests"},{"name":"v0.39.2","sha":"24cd39089a82abae50195ab9ea3f7be0ef6a2d51","kind":"commit","published_at":"2022-02-26T01:07:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.2/manifests"},{"name":"v0.39.1","sha":"c89131bcf3851505c2ff5f7ca3ae66b1b6a725d4","kind":"commit","published_at":"2022-02-25T16:32:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.1/manifests"},{"name":"v0.39.0","sha":"6c306efed2811c0c78b599355c82f937fe7a251d","kind":"commit","published_at":"2022-02-24T16:15:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.0/manifests"},{"name":"v0.38.0","sha":"52d2e62cdcc08967ead746820346766e12698488","kind":"commit","published_at":"2022-02-15T17:51:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.38.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.38.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.38.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.38.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.38.0/manifests"},{"name":"v0.37.10","sha":"0ed284212305c76d65687aad6eaabf91142e0ddc","kind":"commit","published_at":"2022-02-07T23:47:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.10","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.10/manifests"},{"name":"v0.37.9","sha":"b78c90d0186c959629722d30fb1ca7c6d27faadb","kind":"commit","published_at":"2022-02-07T22:50:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.9","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.9/manifests"},{"name":"v0.37.8","sha":"2c62651c8279f288d9668039da4a865e9a5d0b2a","kind":"commit","published_at":"2022-02-07T21:55:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.8","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.8/manifests"},{"name":"v0.37.7","sha":"5519a25035e6c6ad46bb4c37ef4e174d1060a257","kind":"commit","published_at":"2022-02-07T17:03:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.7","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.7/manifests"},{"name":"v0.37.6","sha":"950ad681a03a5f6924388f92edcf638b87576992","kind":"commit","published_at":"2022-02-07T15:55:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.6/manifests"},{"name":"v0.37.5","sha":"e474b2f23c1e42d274af511333e0d06b879b169d","kind":"commit","published_at":"2022-02-05T15:23:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.5/manifests"},{"name":"v0.37.4","sha":"e7bef5e511c94940c46bba9a4193dacc7c9e97c5","kind":"commit","published_at":"2022-02-04T21:49:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.4/manifests"},{"name":"v0.37.3","sha":"e4ac7700dd76b9cf30778ef40e9acfd3168dcaeb","kind":"commit","published_at":"2022-02-04T19:44:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.3/manifests"},{"name":"v0.37.2","sha":"d3469801fc1e3eae117049064f751689c64bc8bc","kind":"commit","published_at":"2022-02-04T19:04:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.2/manifests"},{"name":"v0.37.1","sha":"3f50bb8fa74436f36202b2582f02be7f91644ab5","kind":"commit","published_at":"2022-02-04T18:23:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.1/manifests"},{"name":"v0.37.0","sha":"341288ba29d66d36afe80f2a7d8eb9b1e53d0a5a","kind":"commit","published_at":"2022-02-04T17:41:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.0/manifests"},{"name":"v0.36.0","sha":"aebe843c6f0307d5c263c25257caf3e6ea827c78","kind":"commit","published_at":"2022-01-19T16:43:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.36.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.36.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.36.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.36.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.36.0/manifests"},{"name":"v0.35.1","sha":"b77ddfc29c2d93dbc61c25b8f0e726c0e238f43b","kind":"commit","published_at":"2022-01-10T18:40:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.35.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.35.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.35.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.1/manifests"},{"name":"v0.35.0","sha":"5e5312c72ddd4b3d4d6200a5e74e78a6d76aa0c7","kind":"commit","published_at":"2022-01-06T22:52:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.35.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.35.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.35.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.0/manifests"},{"name":"v0.34.0","sha":"7f8cb0bd8068709982ef23e931e1ceaa2dfac955","kind":"commit","published_at":"2021-12-22T20:55:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.34.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.34.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.34.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.34.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.34.0/manifests"},{"name":"v0.33.0","sha":"a27907659d6c43f5bef2f76a9e381f2bf697a64f","kind":"commit","published_at":"2021-12-16T13:55:53.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.33.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.33.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.33.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.33.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.33.0/manifests"},{"name":"v0.32.2","sha":"727b84ce0da67a35899e966eb4408b3e6553ed63","kind":"commit","published_at":"2021-12-14T17:17:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.32.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.2/manifests"},{"name":"v0.32.1","sha":"d3804d1a827c9b1fa9867208de1167a9e62c6e99","kind":"commit","published_at":"2021-12-14T01:49:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.32.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.1/manifests"},{"name":"v0.32.0","sha":"da0b17b719b6d5cabe0819d44f90755c73312de8","kind":"commit","published_at":"2021-12-08T21:25:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.32.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.0/manifests"},{"name":"v0.31.0","sha":"22c4b275e73d70807fca8017d4896d8398b3373f","kind":"commit","published_at":"2021-12-03T16:12:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.31.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.31.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.31.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.31.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.31.0/manifests"},{"name":"v0.30.1","sha":"45ea4177e8a37a56798bacf89c4b6cdd5d056d6e","kind":"commit","published_at":"2021-11-15T19:41:46.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.30.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.30.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.30.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.30.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.30.1/manifests"},{"name":"v0.29.0","sha":"a2882ee810edcbf4db3230e982c316b261eb17cd","kind":"commit","published_at":"2021-10-29T16:00:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.29.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.29.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.29.0/manifests"},{"name":"v0.28.0","sha":"3286a4d4cc88e02e81db4f07d21a9fc6edac2a01","kind":"commit","published_at":"2021-10-28T19:41:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.28.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.28.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.28.0/manifests"},{"name":"v0.27.0","sha":"89242e6ed32528132ac79635a856b7a04a77014f","kind":"commit","published_at":"2021-10-21T18:34:17.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.27.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.27.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.27.0/manifests"},{"name":"v0.26.0","sha":"7a005fec0698a405a618242557e03ceebe1ee650","kind":"commit","published_at":"2021-10-15T17:26:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.26.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.26.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.26.0/manifests"},{"name":"v0.25.0","sha":"b25f5b664b21837aee9130d2e63812431bc64a40","kind":"commit","published_at":"2021-10-07T19:18:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.25.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.25.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.25.0/manifests"},{"name":"v0.24.1","sha":"0395c4744581a3d33bf80656f092b19dd75b32fb","kind":"commit","published_at":"2021-09-27T22:31:59.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.24.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.24.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.24.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.1/manifests"},{"name":"v0.24.0","sha":"6d4d083acccc68455e09dd45a474b3f6b5215006","kind":"commit","published_at":"2021-09-23T00:55:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.24.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.24.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.0/manifests"},{"name":"v0.23.0","sha":"ddfc8e20c0f370d25e7d032b23bef2e3d519506c","kind":"commit","published_at":"2021-09-13T17:06:23.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.23.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.23.0/manifests"},{"name":"v0.22.0","sha":"06dcd3261dadf77ec0d86e7a981eb4aac7008d09","kind":"commit","published_at":"2021-09-03T21:29:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.22.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.22.0/manifests"},{"name":"v0.21.0","sha":"ff828fbac211e1d9e993c309461bd9e0636fc2ec","kind":"commit","published_at":"2021-08-20T17:50:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.21.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.21.0/manifests"},{"name":"v0.20.0","sha":"b0e9b92a257f920bf6b31438a1dba6762fa7390d","kind":"commit","published_at":"2021-08-18T15:00:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.20.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.20.0/manifests"},{"name":"v0.19.1","sha":"fee35dd1753308fc887da744de5d0c66947c7493","kind":"commit","published_at":"2021-06-30T17:10:00.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.19.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.1/manifests"},{"name":"v0.19.0","sha":"2de56c074917b159fdd76fc6b1da974b4c53ca2e","kind":"commit","published_at":"2021-06-29T22:16:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.19.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.0/manifests"},{"name":"v0.18.0","sha":"962e82297c329f728018335858ad619ef3e00648","kind":"commit","published_at":"2021-06-29T18:28:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.18.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.18.0/manifests"},{"name":"v0.17.1","sha":"6dd698d89edee65fdcb7c0b2630b6253ed34deba","kind":"commit","published_at":"2021-06-19T18:32:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.17.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.17.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.17.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.1/manifests"},{"name":"v0.17.0","sha":"801e662633304256a05988c868234a2d0ed5a1ae","kind":"commit","published_at":"2021-06-04T16:50:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.17.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.0/manifests"},{"name":"v0.16.1","sha":"8be0d988e7e793d62afd2e9e2a881428322329cb","kind":"commit","published_at":"2021-05-25T21:13:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.16.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.1/manifests"},{"name":"v0.16.0","sha":"80e23bdb506835cdfe26780abcfd977363bae015","kind":"commit","published_at":"2021-05-25T19:01:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.16.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.0/manifests"},{"name":"v0.15.2","sha":"baa859d2ed084eb7c3d5621a255ad6f277533276","kind":"commit","published_at":"2021-05-12T21:28:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.2/manifests"},{"name":"v0.15.1","sha":"032cecbe7f19ca6f6f07d80f8dc902530e4c7502","kind":"commit","published_at":"2021-04-22T20:38:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"1632fdd85ebe8692328ce82b8ac3a3849dbdc315","kind":"commit","published_at":"2021-04-22T19:56:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.0/manifests"},{"name":"v0.14.0","sha":"26a4dd36a8932c7867fcdd6296f50643be30f8a6","kind":"commit","published_at":"2021-03-20T16:23:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.14.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.14.0/manifests"},{"name":"v0.13.1","sha":"40e9c4b146b2cf52112619969f18453ce7fa3234","kind":"commit","published_at":"2021-02-26T20:59:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.13.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.13.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.1/manifests"},{"name":"v0.13.0","sha":"6d5ff0fd8e7c39c95d30c960c8ae6e95b91cd9d0","kind":"commit","published_at":"2021-02-25T18:47:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.13.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.0/manifests"},{"name":"v0.12.7","sha":"c5e3b631ac354a6b22d912c6ed8972a433b02eae","kind":"commit","published_at":"2021-02-17T13:14:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.7","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.7/manifests"},{"name":"v0.12.6","sha":"8d838b18a85d2c2f0ee976cf2af491913dbcf98b","kind":"commit","published_at":"2021-02-05T16:26:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.6/manifests"},{"name":"v0.12.5","sha":"b22fd987db989debd8e880e7dfe934d39fd016f3","kind":"commit","published_at":"2021-02-01T17:03:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.5/manifests"},{"name":"v0.12.4","sha":"407769e88cdb5232b72aa573d9643e6624b92743","kind":"commit","published_at":"2021-01-27T16:51:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.4/manifests"},{"name":"v0.12.3","sha":"7bcdafe745a58592552393f8cb32f2d58982aa21","kind":"commit","published_at":"2021-01-22T21:10:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.3/manifests"},{"name":"v0.12.2","sha":"0f6288881bf8db287e07576bf8dd067184745759","kind":"commit","published_at":"2021-01-06T02:32:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.2/manifests"},{"name":"v0.12.1","sha":"bb70b0b43ee794c97266cc352a37804f2068acd2","kind":"commit","published_at":"2021-01-05T00:45:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"37b96a241b043f09f6cfee145c19b425e858f939","kind":"commit","published_at":"2021-01-04T21:50:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.0/manifests"},{"name":"v0.11.1","sha":"e299a5355fffa8a200f7076befeaf4a494d495f7","kind":"commit","published_at":"2020-12-23T18:23:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.11.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.1/manifests"},{"name":"v0.11.0","sha":"6aaf9ee712f41c38eefe17a07a1aa43cac9e7990","kind":"commit","published_at":"2020-12-18T21:59:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.11.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"52bac6e2fd1adb3d8852f0fab6536a81ec037b89","kind":"commit","published_at":"2020-12-10T03:20:53.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.10.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.10.0/manifests"},{"name":"v0.9.2","sha":"f87c59b4eb5d5b1396dcc8ad06a07a0706c4b7c5","kind":"commit","published_at":"2020-12-03T21:32:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.9.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.2/manifests"},{"name":"v0.9.1","sha":"6f9ded60ed144de3e837effdee5d96366441e7d3","kind":"commit","published_at":"2020-12-02T12:50:31.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.1/manifests"},{"name":"v0.9.0","sha":"ae71b8832d16b70b0373a518877d169659f07bd9","kind":"commit","published_at":"2020-11-30T16:37:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"71939557e6164712accfd0f7486ef4a6c8459656","kind":"commit","published_at":"2020-11-17T18:21:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.8.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.8.0/manifests"},{"name":"v0.7.1","sha":"dad1d9691c355c643eb3a7f1be1cadde36d913c7","kind":"commit","published_at":"2020-11-12T14:36:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.7.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"9581a0309b570d38037962598d4c30c8d028aaa2","kind":"commit","published_at":"2020-11-11T20:15:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.7.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"b3098f3423d11fe10ea18138177258f6d837d379","kind":"commit","published_at":"2020-11-09T19:18:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.6.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"ecfc471ce51a2a84ec144263592c223816241c7a","kind":"commit","published_at":"2020-11-04T20:47:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.5.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"773581704c736925a7a5485c18bde3f8129f1238","kind":"commit","published_at":"2020-10-30T19:14:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.5.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"f19cb03aa07891e433b5e2e6faa956bc9de83bcf","kind":"commit","published_at":"2020-10-26T15:19:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.4.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"15e2e32103b9aaf6d816fa2c6d9b9dc94ba8c16b","kind":"commit","published_at":"2020-10-23T15:06:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.4.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"1bf1e643ebb49fac1f2f30c1a13ff8b056dec938","kind":"commit","published_at":"2020-10-15T18:41:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.3.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.3.0/manifests"},{"name":"v0.2.0","sha":"956af57d3b8e23d5c607f486b0b65a760a602aad","kind":"commit","published_at":"2020-10-08T18:37:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.2.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"5adfce19e0abdfb0d2c62c80713b90f681c83bf4","kind":"commit","published_at":"2020-09-29T20:33:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0/manifests"},{"name":"v0.1.0-beta.5","sha":"8b81c87d18da91d2a5c8f10fdfb93ec3e05aa1f6","kind":"commit","published_at":"2020-09-26T02:59:19.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.5/manifests"},{"name":"v0.1.0-beta.4","sha":"676544b6ab7a5b70af7c2d3d2d34b23c50996900","kind":"commit","published_at":"2020-08-10T22:28:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.4/manifests"},{"name":"v0.1.0-beta.3","sha":"2d452bf59e0f44de6051ac3f316c8afafe0a929a","kind":"commit","published_at":"2020-08-10T14:33:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.3/manifests"},{"name":"v0.1.0-beta.2","sha":"06f8355fce7901bf88493323831b235ef068dc4a","kind":"commit","published_at":"2020-07-27T19:13:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.2/manifests"},{"name":"v0.1.0-beta.1","sha":"19eadde9ca03c89f7325b8ff09ba8114abbe4dcf","kind":"commit","published_at":"2020-07-27T13:55:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.1/manifests"}]},"repo_metadata_updated_at":"2026-08-07T23:36:11.656Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":14.60656632613273,"stargazers_count":null,"forks_count":null,"average":7.303283163066365},"purl":"pkg:apk/alpine/syft-zsh-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=edge","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-zsh-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-zsh-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-zsh-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-22T11:00:46.375Z","issues_count":731,"pull_requests_count":2255,"avg_time_to_close_issue":13448535.886297377,"avg_time_to_close_pull_request":877371.7434279706,"issues_closed_count":343,"pull_requests_closed_count":1902,"pull_request_authors_count":150,"issue_authors_count":381,"avg_comments_per_issue":2.1299589603283176,"avg_comments_per_pull_request":0.5197339246119734,"merged_pull_requests_count":1710,"bot_issues_count":11,"bot_pull_requests_count":1193,"past_year_issues_count":194,"past_year_pull_requests_count":931,"past_year_avg_time_to_close_issue":1820259.3389830508,"past_year_avg_time_to_close_pull_request":292805.3951612903,"past_year_issues_closed_count":59,"past_year_pull_requests_closed_count":744,"past_year_pull_request_authors_count":63,"past_year_issue_authors_count":127,"past_year_avg_comments_per_issue":0.9536082474226805,"past_year_avg_comments_per_pull_request":0.32438238453276047,"past_year_bot_issues_count":7,"past_year_bot_pull_requests_count":593,"past_year_merged_pull_requests_count":666,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft-zsh-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft-zsh-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft-zsh-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft-zsh-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft-zsh-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft-zsh-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":"michal@polanski.me","url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":478,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2023-04-01T19:49:45.871Z","updated_at":"2023-04-01T19:49:45.871Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-edge","url":"https://pkgs.alpinelinux.org/packages?branch=edge","ecosystem":"alpine","default":false,"packages_count":39886,"maintainers_count":902,"namespaces_count":3,"keywords_count":6588,"github":"alpinelinux","metadata":{"repos":["main","community","testing"],"funded_packages_count":2846},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.616Z","updated_at":"2026-08-10T05:07:40.402Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/namespaces"}},{"id":13360863,"name":"syft","ecosystem":"nixpkgs","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-03T19:47:25.875Z","latest_release_published_at":"2026-02-03T19:47:25.875Z","latest_release_number":"1.5.0","last_synced_at":"2026-04-20T18:03:36.713Z","created_at":"2026-02-03T19:47:19.044Z","updated_at":"2026-08-07T23:36:12.107Z","registry_url":"https://search.nixos.org/packages?channel=24.05\u0026query=syft","install_command":"nix-env -iA nixpkgs.syft","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-24.05/pkgs/by-name/sy/syft/package.nix#L77","metadata":{"nix_attribute":"syft-1.5.0","position":"pkgs/by-name/sy/syft/package.nix:77","platforms":["x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux"],"broken":false,"insecure":false,"unfree":false,"outputs":["out"]},"repo_metadata":{},"repo_metadata_updated_at":"2026-08-07T23:36:12.106Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/syft?channel=24.05\u0026repository_url=https://channels.nixos.org/nixos-24.05","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/syft","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/syft","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/syft/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/syft/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/syft/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/syft/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/syft/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/syft/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/syft/codemeta","maintainers":[{"uuid":"06kellyjac","login":null,"name":"Jack","email":"hello+nixpkgs@j-k.io","url":"https://github.com/06kellyjac","packages_count":92,"html_url":null,"role":null,"created_at":"2026-03-05T02:27:56.382Z","updated_at":"2026-03-05T02:27:56.382Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers/06kellyjac/packages"},{"uuid":"developer-guy","login":null,"name":"Batuhan Apaydın","email":"developerguyn@gmail.com","url":"https://github.com/developer-guy","packages_count":19,"html_url":null,"role":null,"created_at":"2026-03-05T02:27:56.344Z","updated_at":"2026-03-05T02:27:56.344Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers/developer-guy/packages"},{"uuid":"kashw2","login":null,"name":"Keanu Ashwell","email":"supra4keanu@hotmail.com","url":"https://github.com/kashw2","packages_count":69,"html_url":null,"role":null,"created_at":"2026-03-05T02:27:56.418Z","updated_at":"2026-03-05T02:27:56.418Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers/kashw2/packages"}],"registry":{"name":"nixpkgs-24.05","url":"https://channels.nixos.org/nixos-24.05","ecosystem":"nixpkgs","default":false,"packages_count":116156,"maintainers_count":3383,"namespaces_count":0,"keywords_count":654,"github":"NixOS","metadata":{"funded_packages_count":1794},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.309Z","updated_at":"2026-08-12T05:03:06.441Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/namespaces"}},{"id":3738301,"name":"github.com/anchore/syft","ecosystem":"go","description":"","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"github.com/anchore","versions_count":267,"first_release_published_at":"2020-07-27T13:55:11.000Z","latest_release_published_at":"2026-07-16T14:21:22.000Z","latest_release_number":"v1.48.0","last_synced_at":"2026-07-21T00:02:23.346Z","created_at":"2022-04-11T14:22:52.264Z","updated_at":"2026-08-12T09:10:16.668Z","registry_url":"https://pkg.go.dev/github.com/anchore/syft","install_command":"go get github.com/anchore/syft","documentation_url":"https://pkg.go.dev/github.com/anchore/syft#section-documentation","metadata":{},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2025-11-27T13:06:35.000Z","size":66336,"stargazers_count":7998,"open_issues_count":517,"forks_count":742,"subscribers_count":63,"default_branch":"main","last_synced_at":"2025-11-28T00:15:31.117Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2025-11-27T21:42:12.000Z","dependencies_parsed_at":"2023-12-20T09:43:51.606Z","dependency_job_id":"3d1fd421-c43b-4d60-87a0-71ec0266d70f","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":244,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":27332805,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-29T02:00:06.589Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:36:13.564Z","dependent_packages_count":217,"downloads":null,"downloads_period":null,"dependent_repos_count":179,"rankings":{"downloads":null,"dependent_repos_count":0.4716266973065013,"dependent_packages_count":0.3341619082398247,"stargazers_count":1.0636907256709147,"forks_count":1.5208920353394721,"docker_downloads_count":0.2112234777592882,"average":0.7203189688632002},"purl":"pkg:golang/github.com/anchore/syft","advisories":[{"uuid":"GSA_kwCzR0hTQS1yamN3LXZnN2otbTlyY84ABT7d","url":"https://github.com/advisories/GHSA-rjcw-vg7j-m9rc","title":"Syft improper temporary file cleanup","description":"### Impact\nSyft versions before v1.42.3 would not properly cleanup temporary storage if the temporary storage was exhausted during a scan. When scanning archives Syft will unpack those archives into temporary storage then inspect the unpacked contents. Under normal operation Syft will remove the temporary data it writes after completing a scan.\n\nThis vulnerability would affect users of Syft that were scanning content that could cause Syft to fill the temporary storage that would then cause Syft to raise an error and exit. When the error is triggered Syft would exit without properly removing the temporary files in use. In our testing this was most easily reproduced by scanning very large artifacts or highly compressed artifacts such as a zipbomb.\n\nBecause Syft would not clean up its temporary files, the result would be filling temporary file storage preventing future runs of Syft or other system utilities that rely on temporary storage being available.\n\n### Patches\n\nThe patch has been released in v1.42.3\n\nSyft now cleans up temporary files when an error condition is encountered.\n\n### Workarounds\n\nThere are no workarounds for this vulnerability in Syft. Users that find their temporary storage depleted can manually remove the temporary files.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-03-20T20:46:29.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":["https://github.com/anchore/syft/security/advisories/GHSA-rjcw-vg7j-m9rc","https://github.com/anchore/stereoscope/pull/537","https://github.com/anchore/syft/pull/4629","https://github.com/anchore/syft/pull/4668","https://nvd.nist.gov/vuln/detail/CVE-2026-33481","https://github.com/advisories/GHSA-rjcw-vg7j-m9rc"],"source_kind":"github","identifiers":["GHSA-rjcw-vg7j-m9rc","CVE-2026-33481"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-03-20T21:00:10.452Z","updated_at":"2026-08-11T14:05:11.053Z","epss_percentage":0.00408,"epss_percentile":0.33522,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yamN3LXZnN2otbTlyY84ABT7d","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1yamN3LXZnN2otbTlyY84ABT7d","packages":[{"ecosystem":"go","package_name":"github.com/anchore/syft","versions":[{"first_patched_version":"1.42.3","vulnerable_version_range":"\u003c 1.42.3"}],"purl":"pkg:go/github.com%2Fanchore%2Fsyft"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yamN3LXZnN2otbTlyY84ABT7d/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1qcDd2LTM1ODctMjk1Ns4AAxfm","url":"https://github.com/advisories/GHSA-jp7v-3587-2956","title":"Credential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set","description":"A password disclosure flaw was found in Syft versions v0.69.0 and v0.69.1. This flaw leaks the password stored in the SYFT_ATTEST_PASSWORD environment variable.\n\n### Impact\nThe `SYFT_ATTEST_PASSWORD` environment variable is for the `syft attest` command to generate attested SBOMs for the given container image. This environment variable is used to decrypt the private key (provided with `syft attest --key \u003cpath-to-key-file\u003e`)  during the signing process while generating an SBOM attestation. \n\nThis vulnerability affects users running syft that have the `SYFT_ATTEST_PASSWORD` environment variable set with credentials (regardless of if the attest command is being used or not). Users that do not have the environment variable `SYFT_ATTEST_PASSWORD` set are not affected by this issue.\n\nThe credentials are leaked in two ways:\n- in the syft logs when `-vv` or `-vvv` are used in the syft command (which is any log level \u003e= `DEBUG`)\n- in the attestation or SBOM only when the `syft-json` format is used \n\nNote that as of v0.69.0 any generated attestations by the `syft attest` command are uploaded to the OCI registry (if you have write access to that registry) in the same way `cosign attach` is done. This means that any attestations generated for the affected versions of syft when the `SYFT_ATTEST_PASSWORD` environment variable was set would leak credentials in the attestation payload uploaded to the OCI registry.\n\nExample commands run from affected versions of syft that show the credential disclosure:\n```bash\n$ SYFT_ATTEST_PASSWORD=123456 syft \u003ccontainer-image-or-directory-input\u003e -o syft-json | grep 123456\n# \"123456\" is in the output\n\n$ SYFT_ATTEST_PASSWORD=123456 syft attest \u003ccontainer-image-input\u003e -o syft-json \n$ cosign download attestation \u003ccontainer-image-input\u003e | jq -r '.payload' | base64 -d | grep 123456\n# \"123456\" is in the output\n```\n\n### Patches\n\nThe patch has been released in v0.70.0.\n\n### Workarounds\n\nThere are no workarounds for this vulnerability.\n\n### References\n\nPatch pull request: https://github.com/anchore/syft/pull/1538","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-02-08T21:38:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","references":["https://github.com/anchore/syft/security/advisories/GHSA-jp7v-3587-2956","https://nvd.nist.gov/vuln/detail/CVE-2023-24827","https://github.com/anchore/syft/commit/9995950c70e849f9921919faffbfcf46401f71f3","https://github.com/advisories/GHSA-jp7v-3587-2956"],"source_kind":"github","identifiers":["GHSA-jp7v-3587-2956","CVE-2023-24827"],"repository_url":"https://github.com/anchore/syft","blast_radius":0.0,"created_at":"2023-02-08T22:03:01.940Z","updated_at":"2026-07-29T14:15:01.072Z","epss_percentage":0.00791,"epss_percentile":0.52501,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qcDd2LTM1ODctMjk1Ns4AAxfm","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1qcDd2LTM1ODctMjk1Ns4AAxfm","packages":[{"ecosystem":"go","package_name":"github.com/anchore/syft","versions":[{"first_patched_version":"0.70.0","vulnerable_version_range":"\u003e= 0.69.0, \u003c 0.70.0"}],"purl":"pkg:go/github.com%2Fanchore%2Fsyft"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qcDd2LTM1ODctMjk1Ns4AAxfm/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/anchore/syft","docker_dependents_count":334,"docker_downloads_count":254767141,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/anchore/syft","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/anchore/syft/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-22T11:00:46.375Z","issues_count":731,"pull_requests_count":2255,"avg_time_to_close_issue":13448535.886297377,"avg_time_to_close_pull_request":877371.7434279706,"issues_closed_count":343,"pull_requests_closed_count":1902,"pull_request_authors_count":150,"issue_authors_count":381,"avg_comments_per_issue":2.1299589603283176,"avg_comments_per_pull_request":0.5197339246119734,"merged_pull_requests_count":1710,"bot_issues_count":11,"bot_pull_requests_count":1193,"past_year_issues_count":194,"past_year_pull_requests_count":931,"past_year_avg_time_to_close_issue":1820259.3389830508,"past_year_avg_time_to_close_pull_request":292805.3951612903,"past_year_issues_closed_count":59,"past_year_pull_requests_closed_count":744,"past_year_pull_request_authors_count":63,"past_year_issue_authors_count":127,"past_year_avg_comments_per_issue":0.9536082474226805,"past_year_avg_comments_per_pull_request":0.32438238453276047,"past_year_bot_issues_count":7,"past_year_bot_pull_requests_count":593,"past_year_merged_pull_requests_count":666,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fanchore%2Fsyft/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fanchore%2Fsyft/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fanchore%2Fsyft/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fanchore%2Fsyft/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fanchore%2Fsyft/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fanchore%2Fsyft/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2263068,"maintainers_count":0,"namespaces_count":837425,"keywords_count":122443,"github":"golang","metadata":{"funded_packages_count":65362,"sync_missing_packages_cursor":{"timestamp":"2026-08-12T00:18:10.975284Z","path":"github.com/fhunleth/muontrap","version":"v0.2.1"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-08-12T12:33:12.528Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13344252,"name":"syft","ecosystem":"nixpkgs","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-02T09:04:05.536Z","latest_release_published_at":"2026-02-02T09:04:05.536Z","latest_release_number":"0.97.1","last_synced_at":"2026-03-05T15:03:20.907Z","created_at":"2026-02-02T09:03:55.915Z","updated_at":"2026-08-07T23:36:13.557Z","registry_url":"https://search.nixos.org/packages?channel=23.11\u0026query=syft","install_command":"nix-env -iA nixpkgs.syft","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-23.11/pkgs/tools/admin/syft/default.nix#L71","metadata":{"nix_attribute":"syft-0.97.1","position":"pkgs/tools/admin/syft/default.nix:71","platforms":["x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux"],"broken":false,"insecure":false,"unfree":false,"outputs":["out"]},"repo_metadata":{},"repo_metadata_updated_at":"2026-08-07T23:36:13.556Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/syft?channel=23.11\u0026repository_url=https://channels.nixos.org/nixos-23.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/syft","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/syft","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/syft/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/syft/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/syft/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/syft/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/syft/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/syft/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/syft/codemeta","maintainers":[{"uuid":"06kellyjac","login":null,"name":"Jack","email":"hello+nixpkgs@j-k.io","url":"https://github.com/06kellyjac","packages_count":89,"html_url":null,"role":null,"created_at":"2026-03-05T15:03:21.252Z","updated_at":"2026-03-05T15:03:21.252Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers/06kellyjac/packages"},{"uuid":"kashw2","login":null,"name":"Keanu Ashwell","email":"supra4keanu@hotmail.com","url":"https://github.com/kashw2","packages_count":63,"html_url":null,"role":null,"created_at":"2026-03-05T15:03:21.417Z","updated_at":"2026-03-05T15:03:21.417Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers/kashw2/packages"},{"uuid":"developer-guy","login":null,"name":"Batuhan Apaydın","email":"developerguyn@gmail.com","url":"https://github.com/developer-guy","packages_count":19,"html_url":null,"role":null,"created_at":"2026-03-05T15:03:21.362Z","updated_at":"2026-03-05T15:03:21.362Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers/developer-guy/packages"}],"registry":{"name":"nixpkgs-23.11","url":"https://channels.nixos.org/nixos-23.11","ecosystem":"nixpkgs","default":false,"packages_count":108178,"maintainers_count":2997,"namespaces_count":0,"keywords_count":569,"github":"NixOS","metadata":{"funded_packages_count":2007},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.577Z","updated_at":"2026-08-12T05:05:01.044Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/namespaces"}},{"id":7782068,"name":"syft","ecosystem":"alpine","description":"Generate a Software Bill of Materials (SBOM) from container images and filesystems","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":7,"first_release_published_at":"2023-05-07T11:41:18.000Z","latest_release_published_at":"2023-11-17T20:59:57.000Z","latest_release_number":"0.84.1-r4","last_synced_at":"2026-04-03T04:40:29.159Z","created_at":"2023-05-22T15:00:50.047Z","updated_at":"2026-08-07T23:36:13.620Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.18/community/x86_64/syft","install_command":"apk add syft","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2025-10-20T14:22:16.000Z","size":23003,"stargazers_count":7796,"open_issues_count":500,"forks_count":720,"subscribers_count":62,"default_branch":"main","last_synced_at":"2025-10-20T16:13:38.101Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2025-10-20T14:24:07.000Z","dependencies_parsed_at":"2023-12-20T09:43:51.606Z","dependency_job_id":"3d1fd421-c43b-4d60-87a0-71ec0266d70f","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":240,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":280449175,"owners_count":26332601,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-22T02:00:06.515Z","response_time":63,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"anchore","name":"Anchore, Inc.","uuid":"16208487","kind":"organization","description":"","email":"info@anchore.com","website":"https://anchore.com/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16208487?v=4","repositories_count":43,"last_synced_at":"2023-03-02T09:35:13.089Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/anchore","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-13T02:25:02.273Z","updated_at":"2023-03-02T09:35:13.093Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore/repositories"},"tags":[{"name":"v1.34.2","sha":"0c98a364d503789ff8d7f122763bb8748de9772f","kind":"tag","published_at":"2025-10-16T12:19:26.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.34.2","html_url":"https://github.com/anchore/syft/releases/tag/v1.34.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.34.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.2/manifests"},{"name":"v1.34.1","sha":"e9a8bc5ab97f94b7f9210d7a0f4a981cdbb22232","kind":"tag","published_at":"2025-10-15T15:27:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.34.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.34.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.34.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.1/manifests"},{"name":"v1.34.0","sha":"6d790ec6ec98b263dae0c54259859b35c3527e1b","kind":"tag","published_at":"2025-10-14T22:25:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.34.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.34.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.34.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.0/manifests"},{"name":"v1.33.0","sha":"b87b9191497c2d410b42c05591347d428129fd2a","kind":"tag","published_at":"2025-09-15T20:38:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.33.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.33.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.33.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.33.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.33.0/manifests"},{"name":"v1.32.0","sha":"2d8e337d3469712c7d92770792f0117ad82c4ad3","kind":"tag","published_at":"2025-08-26T21:47:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.32.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.32.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.32.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.32.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.32.0/manifests"},{"name":"v1.31.0","sha":"ab9db0024ed35ab6a4e33e539593f5a3c58a5594","kind":"tag","published_at":"2025-08-13T14:50:45.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.31.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.31.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.31.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.31.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.31.0/manifests"},{"name":"v1.30.0","sha":"49736e7c4acd3cb1aed2d3a8c8cdcd696ac77166","kind":"tag","published_at":"2025-08-08T18:21:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.30.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.30.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.30.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.30.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.30.0/manifests"},{"name":"v1.29.1","sha":"386ef842d99a72027fb5fd1085fde87883640eaf","kind":"tag","published_at":"2025-07-30T18:16:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.29.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.29.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.29.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.1/manifests"},{"name":"v1.29.0","sha":"6f36b586ba1cc49074573d07ca397d18e9eecd16","kind":"tag","published_at":"2025-07-21T19:36:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.29.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.29.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.0/manifests"},{"name":"v1.28.0","sha":"e8b62ab9aca2e896ab608c118619c5a7831bc737","kind":"tag","published_at":"2025-07-02T16:25:07.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.28.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.28.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.28.0/manifests"},{"name":"v1.27.1","sha":"10f06317104361183b4cb803c0e6ac1727257551","kind":"tag","published_at":"2025-06-12T13:39:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.27.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.27.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.27.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.1/manifests"},{"name":"v1.27.0","sha":"18f9b5ab58aa04dda61a3eed8123bd89470befe9","kind":"tag","published_at":"2025-06-09T18:36:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.27.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.27.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.0/manifests"},{"name":"v1.26.1","sha":"7bfb4c86a6d7e5343c45c2844a232b6c7ba4c51c","kind":"tag","published_at":"2025-05-22T12:36:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.26.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.26.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.26.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.1/manifests"},{"name":"v1.26.0","sha":"ac883f52edb8ca1f5a0a61d12c288d4b34ea3897","kind":"tag","published_at":"2025-05-20T21:27:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.26.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.26.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.0/manifests"},{"name":"v1.25.1","sha":"db77b54c019c9aae142d13ca642ddb56d0deefa6","kind":"tag","published_at":"2025-05-16T18:53:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.25.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.25.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.25.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.1/manifests"},{"name":"v1.25.0","sha":"2d4fe513ecec7af9626b9dada586c7a0ff63a67d","kind":"tag","published_at":"2025-05-16T16:29:38.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.25.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.25.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.0/manifests"},{"name":"v1.24.0","sha":"3c7018a853ab7b311db9ff70e1cf3113b46d9c0c","kind":"tag","published_at":"2025-05-14T14:51:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.24.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.24.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.24.0/manifests"},{"name":"v1.23.1","sha":"a714fb8391471c6ddf6e583229d982d1316d64a8","kind":"tag","published_at":"2025-04-25T14:52:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.23.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.23.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.23.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.1/manifests"},{"name":"v1.23.0","sha":"4211d796672ab21250a4d6fd8e45204d6dc00d0e","kind":"tag","published_at":"2025-04-24T20:16:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.23.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.0/manifests"},{"name":"v1.22.0","sha":"9ab83874ed21c07479d8eeddd88a6894e1ff8537","kind":"tag","published_at":"2025-04-01T14:37:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.22.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.22.0/manifests"},{"name":"v1.21.0","sha":"7bdbfc04781a18827c30a505d64a8671c9827bd7","kind":"tag","published_at":"2025-03-17T18:52:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.21.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.21.0/manifests"},{"name":"v1.20.0","sha":"46522bcc5dff8b65b61a7cda1393abe515802306","kind":"tag","published_at":"2025-02-21T20:44:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.20.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.20.0/manifests"},{"name":"v1.19.0","sha":"222e6548a96f8c80015c1d24f01dea3052a04893","kind":"tag","published_at":"2025-01-22T19:57:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.19.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.19.0/manifests"},{"name":"v1.18.1","sha":"5e16e5031a13f8a11057feb8544decebfc43b4ed","kind":"tag","published_at":"2024-12-13T18:41:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.18.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.18.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.18.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.1/manifests"},{"name":"v1.18.0","sha":"d38efb0b7fb7106909bc532a4efc68b78a917a34","kind":"tag","published_at":"2024-12-09T21:02:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.18.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.0/manifests"},{"name":"v1.17.0","sha":"a8d4202d77b6b31e75ce5af09a8b03ad14e533d3","kind":"tag","published_at":"2024-11-21T14:39:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.17.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.17.0/manifests"},{"name":"v1.16.0","sha":"8a41d772509d37267a65e0b425808e883e4b9dce","kind":"tag","published_at":"2024-11-04T22:29:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.16.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.16.0/manifests"},{"name":"v1.15.0","sha":"55cc1877ef246d8cabfd9bbeb0a8747b59c03431","kind":"tag","published_at":"2024-10-28T21:11:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.15.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.15.0/manifests"},{"name":"v1.14.2","sha":"e4e985b9b05b9570648399adf292ab7f659b4cef","kind":"tag","published_at":"2024-10-21T17:20:27.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.14.2","html_url":"https://github.com/anchore/syft/releases/tag/v1.14.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.14.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.2/manifests"},{"name":"v1.14.1","sha":"754cebee6414c614acf03ee0f87abfcf6176e051","kind":"tag","published_at":"2024-10-15T13:04:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.14.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.14.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.14.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.1/manifests"},{"name":"v1.14.0","sha":"ccbee94b876240284c25c8931c6233fc71a5b7fb","kind":"tag","published_at":"2024-10-07T20:40:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.14.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.0/manifests"},{"name":"v1.13.0","sha":"01de99b25304ec95197c00b21d698f127b31a887","kind":"tag","published_at":"2024-09-24T13:28:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.13.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.13.0/manifests"},{"name":"v1.12.2","sha":"fcd5ec951de6b3fc1f1aa2a36968356d2eb22170","kind":"tag","published_at":"2024-09-11T14:12:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.12.2","html_url":"https://github.com/anchore/syft/releases/tag/v1.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.2/manifests"},{"name":"v1.12.1","sha":"c33a51d3d839ba619ea2217ee00a56be23f9fb9f","kind":"tag","published_at":"2024-09-10T20:42:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.12.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.1/manifests"},{"name":"v1.12.0","sha":"dbc4238f63c027efc09ce5fe51e069c1145f6846","kind":"tag","published_at":"2024-09-10T17:37:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.12.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.0/manifests"},{"name":"v1.11.1","sha":"95b4a88256bddebb91831250f28f602f8c36552a","kind":"tag","published_at":"2024-08-20T16:25:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.11.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.1/manifests"},{"name":"v1.11.0","sha":"19cc664cf8e7020dd692a62efcbba98ab670bde9","kind":"tag","published_at":"2024-08-09T17:52:21.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.11.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.0/manifests"},{"name":"v1.10.0","sha":"a4b5dcd0df80f6a58c8610e25104647710c1da5d","kind":"tag","published_at":"2024-07-30T16:13:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.10.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.10.0/manifests"},{"name":"v1.9.0","sha":"4e09908ba124dca7e6f1f6e7dc4f4663fae658ca","kind":"tag","published_at":"2024-07-11T17:32:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.9.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.9.0/manifests"},{"name":"v1.8.0","sha":"1eae9333a9450c135ff929578597c79b01c9f5ff","kind":"tag","published_at":"2024-06-24T15:43:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.8.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.8.0/manifests"},{"name":"v1.7.0","sha":"22d57314826fce1bff469d8173884489f8212925","kind":"tag","published_at":"2024-06-14T19:48:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.7.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.7.0/manifests"},{"name":"v1.6.0","sha":"c43f4fb416c34c1c4b3997373689d8d4c0fb9b36","kind":"tag","published_at":"2024-06-10T15:39:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.6.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"ac34808b9c55bb274b1205f9b5d9cf495239577d","kind":"tag","published_at":"2024-05-28T15:11:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.5.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.5.0/manifests"},{"name":"v1.4.1","sha":"c200896a9644f9b6bd4bc3785c848276c33bb53c","kind":"tag","published_at":"2024-05-09T19:45:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.4.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.1/manifests"},{"name":"v1.4.0","sha":"4194a2cd34d2f15dd9a96774ba2fbc5463db4c58","kind":"tag","published_at":"2024-05-09T18:14:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.4.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"87cd6c8c48239a20c413f6461e90000ff30ee601","kind":"tag","published_at":"2024-04-26T15:01:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.3.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"dde5d349b1eef740c285255e6a9e3a8f5c9938e1","kind":"tag","published_at":"2024-04-12T18:31:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.2.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.2.0/manifests"},{"name":"v1.1.1","sha":"1e31356c49bf2c30fd80c833482e1fbe4133ff83","kind":"tag","published_at":"2024-04-04T14:52:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.1.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"f4e18961b979f5e6d0cc3b1e4fce608c8ceb29d8","kind":"tag","published_at":"2024-03-25T21:41:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.1.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"1b121ac3f4d589060ddf1fac0bcd6871ea4731e3","kind":"tag","published_at":"2024-03-06T19:51:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.0.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"356f7c92b464b69be3a2a898cd98a63037eeadcc","kind":"tag","published_at":"2024-02-29T14:50:50.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.0.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.0/manifests"},{"name":"v0.105.1","sha":"928511ea0f1449e057e8057e38743d258b22476b","kind":"tag","published_at":"2024-02-26T16:52:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.105.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.105.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.105.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.1/manifests"},{"name":"v0.105.0","sha":"65cadda48653d2452a7e41a47a60d2934e8fcb07","kind":"tag","published_at":"2024-02-14T21:16:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.105.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.105.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.105.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.0/manifests"},{"name":"v0.104.0","sha":"bd0cb916df4376a06e56ef7f3cc0da6659d7c2c6","kind":"tag","published_at":"2024-02-07T20:51:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.104.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.104.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.104.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.104.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.104.0/manifests"},{"name":"v0.103.1","sha":"377538e4a692b8070716eb091456b112ccc2cb81","kind":"tag","published_at":"2024-01-31T17:09:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.103.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.103.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.103.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.1/manifests"},{"name":"v0.103.0","sha":"bbe7fa180a38079318fd4a75d6276720374ccecd","kind":"tag","published_at":"2024-01-31T16:34:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.103.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.103.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.103.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.0/manifests"},{"name":"v0.102.0","sha":"d7c51e5c82de8b64b992f5962842c20903b5934a","kind":"tag","published_at":"2024-01-26T14:34:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.102.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.102.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.102.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.102.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.102.0/manifests"},{"name":"v0.101.1","sha":"3eab5932e5271eea5506ab9710239b1415c827f8","kind":"tag","published_at":"2024-01-19T22:02:00.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.101.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.101.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.101.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.1/manifests"},{"name":"v0.101.0","sha":"297ece69045d6d73a184ed955a99d90769b1cb45","kind":"tag","published_at":"2024-01-17T20:41:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.101.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.101.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.101.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.0/manifests"},{"name":"v0.100.0","sha":"a16a4ad6c993aaaa1ec502667c215b0e8c8e51ff","kind":"tag","published_at":"2024-01-05T21:33:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.100.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.100.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.100.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.100.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.100.0/manifests"},{"name":"v0.99.0","sha":"3cffa0b7fd276a35123c48e45407c4f402f2c58f","kind":"tag","published_at":"2023-12-21T16:18:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.99.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.99.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.99.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.99.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.99.0/manifests"},{"name":"v0.98.0","sha":"5c8dd4c3a7632dcfd999bab7a5b73c3180f1b628","kind":"tag","published_at":"2023-11-29T14:52:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.98.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.98.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.98.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.98.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.98.0/manifests"},{"name":"v0.97.1","sha":"7cfb5f630a7a2105d49d65eaaaa2e2c06e4eda73","kind":"tag","published_at":"2023-11-17T21:03:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.97.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.97.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.97.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.1/manifests"},{"name":"v0.97.0","sha":"1c787f436fca20cbec4541f978ed2a634b880c97","kind":"tag","published_at":"2023-11-16T22:56:21.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.97.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.97.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.97.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.0/manifests"},{"name":"v0.96.0","sha":"0891d35e0774f175e3a3f170edcce9ad2f4f015b","kind":"tag","published_at":"2023-11-09T14:04:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.96.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.96.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.96.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.96.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.96.0/manifests"},{"name":"v0.95.0","sha":"9b98785aab9346999a0b5e9f5e4b4e63a1b1916c","kind":"tag","published_at":"2023-11-07T16:43:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.95.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.95.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.95.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.95.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.95.0/manifests"},{"name":"v0.94.0","sha":"8f6bdde6662aa8050a71eadbdb7bd5a3b079a56d","kind":"tag","published_at":"2023-10-20T17:21:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.94.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.94.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.94.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.94.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.94.0/manifests"},{"name":"v0.93.0","sha":"0748945c8341a06415ac80e624b84e8d3f548d39","kind":"tag","published_at":"2023-10-10T17:27:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.93.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.93.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.93.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.93.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.93.0/manifests"},{"name":"v0.92.0","sha":"8f57d22f639e132cbd87324abacd864232c611ce","kind":"tag","published_at":"2023-09-27T15:40:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.92.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.92.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.92.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.92.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.92.0/manifests"},{"name":"v0.91.0","sha":"b7fa75d7f82a6816d307805ac07e6965c799e938","kind":"tag","published_at":"2023-09-20T19:41:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.91.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.91.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.91.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.91.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.91.0/manifests"},{"name":"v0.90.0","sha":"b82c0ffc3417bdc8c38f4633af95a668ec29fa35","kind":"commit","published_at":"2023-09-11T16:12:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.90.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.90.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.90.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.90.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.90.0/manifests"},{"name":"v0.89.0","sha":"b454160549bbd199e0a5693750856f30b41767f7","kind":"commit","published_at":"2023-08-31T14:50:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.89.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.89.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.89.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.89.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.89.0/manifests"},{"name":"v0.88.0","sha":"dd09e0362e46bee7285e0fca5ed96e398c314380","kind":"commit","published_at":"2023-08-25T20:45:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.88.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.88.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.88.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.88.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.88.0/manifests"},{"name":"v0.87.1","sha":"4762ba0943785fe778276893388e839e01787b45","kind":"commit","published_at":"2023-08-17T16:55:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.87.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.87.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.87.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.1/manifests"},{"name":"v0.87.0","sha":"b3d7ba569b64376cf33df717e3bc40d8375e033b","kind":"commit","published_at":"2023-08-14T15:37:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.87.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.87.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.87.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.0/manifests"},{"name":"v0.86.1","sha":"e2f7befbfbf88053dfb2007c6499a4bb2d232c3c","kind":"commit","published_at":"2023-07-31T17:29:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.86.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.86.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.86.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.1/manifests"},{"name":"v0.86.0","sha":"f14742b3f3a6f8cd4bc696dbafee53ab1d665da7","kind":"commit","published_at":"2023-07-31T16:02:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.86.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.86.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.86.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.0/manifests"},{"name":"v0.85.0","sha":"4fc17edd146af34ab06f5b0443ef8ddac3aaf076","kind":"commit","published_at":"2023-07-12T17:14:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.85.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.85.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.85.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.85.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.85.0/manifests"},{"name":"v0.84.1","sha":"791d1f955215f1dad383c9835e4d3c01267dc0f5","kind":"commit","published_at":"2023-06-28T16:05:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.84.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.84.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.84.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.1/manifests"},{"name":"v0.84.0","sha":"5d54e6e847192f63db80c9a7ee23197476c632ce","kind":"commit","published_at":"2023-06-20T16:08:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.84.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.84.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.84.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.0/manifests"},{"name":"v0.83.1","sha":"a1bba36d514c3ff0f34635b9cdc9f07a92ea793b","kind":"commit","published_at":"2023-06-14T15:45:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.83.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.83.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.83.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.1/manifests"},{"name":"v0.83.0","sha":"1764e1c3f6bd66781f8350d957a1f95e4d9ad3de","kind":"commit","published_at":"2023-06-05T19:04:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.83.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.83.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.83.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.0/manifests"},{"name":"v0.82.0","sha":"4ac8fdf6df0da4cd6f76820dbec9f490ee56bcba","kind":"commit","published_at":"2023-05-23T16:58:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.82.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.82.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.82.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.82.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.82.0/manifests"},{"name":"v0.81.0","sha":"334a775cb9cd6bf50033de1bb3aa04f46b669f5d","kind":"commit","published_at":"2023-05-19T14:21:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.81.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.81.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.81.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.81.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.81.0/manifests"},{"name":"v0.80.0","sha":"0f1aed447751f92dcc0165b56aa474ec9706805e","kind":"commit","published_at":"2023-05-05T15:41:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.80.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.80.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.80.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.80.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.80.0/manifests"},{"name":"v0.79.0","sha":"b2b332e8b2b66af0905e98b54ebd713a922be1a8","kind":"commit","published_at":"2023-04-21T13:34:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.79.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.79.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.79.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.79.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.79.0/manifests"},{"name":"v0.78.0","sha":"244b797a199458f504758c0e3a775572a021e629","kind":"commit","published_at":"2023-04-17T16:26:07.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.78.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.78.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.78.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.78.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.78.0/manifests"},{"name":"v0.77.0","sha":"dd30c99bc2439cb91e3d084eb21e1040dd5a54dc","kind":"commit","published_at":"2023-04-11T14:13:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.77.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.77.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.77.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.77.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.77.0/manifests"},{"name":"v0.76.1","sha":"7845381331e873f65fd5013f44b7d85168ced5f5","kind":"commit","published_at":"2023-04-05T17:59:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.76.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.76.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.76.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.1/manifests"},{"name":"v0.76.0","sha":"dfcc07e5122217ca9e2fc75817c593356fc0c405","kind":"commit","published_at":"2023-03-31T14:04:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.76.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.76.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.76.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.0/manifests"},{"name":"v0.75.0","sha":"cc0a376aba43e7f9c5fe66320643f72088533838","kind":"commit","published_at":"2023-03-13T17:26:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.75.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.75.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.75.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.75.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.75.0/manifests"},{"name":"v0.74.1","sha":"41cbbe09b205e3b80e8a57d4f7a509b5f938557d","kind":"commit","published_at":"2023-03-07T17:54:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.74.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.74.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.74.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.1/manifests"},{"name":"v0.74.0","sha":"5f90d0371873faf5eb8f2e748909b32294be6263","kind":"commit","published_at":"2023-03-01T20:35:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.74.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.74.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.74.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.0/manifests"},{"name":"v0.72.1","sha":"be71f7c6aea3fd663e0f059df1d8060c2f6e916d","kind":"commit","published_at":"2023-02-22T21:34:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.72.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.72.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.72.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.1/manifests"},{"name":"v0.73.0","sha":"aa151da5fe2a1b11502c852fd2d3ad462c1d245f","kind":"commit","published_at":"2023-02-22T19:08:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.73.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.73.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.73.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.73.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.73.0/manifests"},{"name":"v0.72.0","sha":"2642a3616170ccbda9d8c8cb4f4a6b0fd5c63da9","kind":"commit","published_at":"2023-02-16T15:22:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.72.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.72.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.72.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.0/manifests"},{"name":"v0.71.0","sha":"88c81d33edc67b0b9636d0046417a9373ac8b74f","kind":"commit","published_at":"2023-02-09T16:35:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.71.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.71.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.71.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.71.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.71.0/manifests"},{"name":"v0.70.0","sha":"9995950c70e849f9921919faffbfcf46401f71f3","kind":"commit","published_at":"2023-02-03T18:06:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.70.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.70.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.70.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.70.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.70.0/manifests"},{"name":"v0.69.1","sha":"1530ef354ffaf59cef6a02c949f2cdb82353954f","kind":"commit","published_at":"2023-01-31T16:53:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.69.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.69.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.69.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.1/manifests"},{"name":"v0.69.0","sha":"b81c9805dcc9bf25dad7659fd9c2bbf7dd3f3d90","kind":"commit","published_at":"2023-01-30T18:47:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.69.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.69.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.69.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.0/manifests"},{"name":"v0.68.1","sha":"4c0aef09b8d7fb78200b04416f474b90b79370de","kind":"commit","published_at":"2023-01-25T17:18:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.68.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.68.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.68.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.1/manifests"},{"name":"v0.68.0","sha":"e58050bac045be672621047d5699b88884e2da62","kind":"commit","published_at":"2023-01-20T14:49:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.68.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.68.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.68.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.0/manifests"},{"name":"v0.66.2","sha":"03971ace43b877e371c13e3f786c1f6c3a4ec507","kind":"commit","published_at":"2023-01-17T21:26:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.66.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.2/manifests"},{"name":"v0.66.1","sha":"ac94bf530c7b1e6ee5df1ed0f9f6454fca8bc918","kind":"commit","published_at":"2023-01-12T22:42:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.66.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.1/manifests"},{"name":"v0.66.0","sha":"260cb4c72d001b63e7462ed214caeb0aab605714","kind":"commit","published_at":"2023-01-12T20:03:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.66.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.0/manifests"},{"name":"v0.65.0","sha":"bc1edb9c8a2fb4824bfdcac6147edc2bbf47aaf6","kind":"commit","published_at":"2023-01-04T16:34:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.65.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.65.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.65.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.65.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.65.0/manifests"},{"name":"v0.64.0","sha":"e1e489a2849c8432781a7cb58b257fa935efa1cf","kind":"commit","published_at":"2022-12-23T13:37:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.64.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.64.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.64.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.64.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.64.0/manifests"},{"name":"v0.63.0","sha":"23a3173c9f2461e5906d1b9e3ac20b4806d74777","kind":"commit","published_at":"2022-12-12T17:55:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.63.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.63.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.63.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.63.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.63.0/manifests"},{"name":"v0.62.3","sha":"247b054ab56f848c477495218754166272f470b5","kind":"commit","published_at":"2022-11-30T16:11:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.3/manifests"},{"name":"v0.62.2","sha":"0cbd0cc70377d5b1b11b808fbbf9ddec450c68ee","kind":"commit","published_at":"2022-11-28T15:43:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.2/manifests"},{"name":"v0.62.1","sha":"098e61dcc81d7a6d666bc62a2166c9b8f32c61bc","kind":"commit","published_at":"2022-11-21T14:26:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.1/manifests"},{"name":"v0.62.0","sha":"da4b2df57640e03f273a2e7e9b04eca40555e139","kind":"commit","published_at":"2022-11-18T18:42:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.0/manifests"},{"name":"v0.61.0","sha":"67888ee855ad37948bfee98e3aa7d592b4f91e95","kind":"commit","published_at":"2022-11-18T14:45:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.61.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.61.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.61.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.61.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.61.0/manifests"},{"name":"v0.60.3","sha":"bc9740d50a38e9660f2f98ed91d84c6d8799cf70","kind":"commit","published_at":"2022-11-03T14:38:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.3/manifests"},{"name":"v0.60.2","sha":"35f0f2931e310882fe7117c41d57a185d72ca498","kind":"commit","published_at":"2022-11-02T14:05:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.2/manifests"},{"name":"v0.60.1","sha":"ba57f3db5189c632ecaa02f9cf0b634c5a55099c","kind":"commit","published_at":"2022-11-01T16:28:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.1/manifests"},{"name":"v0.60.0","sha":"4c5c6f6319d931f324c3a15a88ba2593109cbbe2","kind":"commit","published_at":"2022-11-01T14:30:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.0/manifests"},{"name":"v0.59.0","sha":"41bc6bb410352845f22766e27dd48ba93aa825a4","kind":"commit","published_at":"2022-10-14T19:54:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.59.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.59.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.59.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.59.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.59.0/manifests"},{"name":"v0.58.0","sha":"b9b13d5525df89194d332467f692bc28bc68d07f","kind":"commit","published_at":"2022-09-29T18:45:59.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.58.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.58.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.58.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.58.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.58.0/manifests"},{"name":"v0.57.0","sha":"04d288b3643f906255af88108f27712bb2be5b63","kind":"commit","published_at":"2022-09-19T20:08:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.57.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.57.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.57.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.57.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.57.0/manifests"},{"name":"v0.56.0","sha":"c5dca001e267d2a91ff82e53ca72535ceef6af02","kind":"commit","published_at":"2022-09-09T18:59:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.56.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.56.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.56.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.56.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.56.0/manifests"},{"name":"v0.55.0","sha":"a7966a4d9d8155be788af33fe5e5af2e40043f82","kind":"commit","published_at":"2022-08-29T19:28:19.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.55.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.55.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.55.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.55.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.55.0/manifests"},{"name":"v0.54.0","sha":"21eb77206020c04c9ca5316562e32179c73926a9","kind":"commit","published_at":"2022-08-16T18:14:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.54.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.54.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.54.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.54.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.54.0/manifests"},{"name":"v0.53.4","sha":"69bde44c6e50a5838cdd2c2c821edb0111013178","kind":"commit","published_at":"2022-08-03T16:24:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.4/manifests"},{"name":"v0.53.3","sha":"042304ee4c614708b4e293f525c5d0a435ede2cf","kind":"commit","published_at":"2022-08-03T13:46:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.3/manifests"},{"name":"v0.53.2","sha":"69fb0a6f3bd6f0281e0d466ab7db23090a3ebc65","kind":"commit","published_at":"2022-08-02T19:25:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.2/manifests"},{"name":"v0.53.1","sha":"f5d02d4e527d3fe1906fd209ce036f58049979f3","kind":"commit","published_at":"2022-08-02T15:44:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.1/manifests"},{"name":"v0.53.0","sha":"b7f587f5dcae631b76d2f80ed2a3b9a207972d80","kind":"commit","published_at":"2022-08-02T13:42:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.0/manifests"},{"name":"v0.52.0","sha":"ba9adb17ebb510a2a3bd2b641738b1d9235e1f3e","kind":"commit","published_at":"2022-07-21T13:17:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.52.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.52.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.52.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.52.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.52.0/manifests"},{"name":"v0.51.0","sha":"470b13045bbbf150f3c79d1487a01ae6acc5592d","kind":"commit","published_at":"2022-07-11T14:09:08.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.51.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.51.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.51.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.51.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.51.0/manifests"},{"name":"v0.50.0","sha":"69134ed3b54bc8b1d86d868611f7d069ce3290a8","kind":"commit","published_at":"2022-07-05T15:57:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.50.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.50.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.50.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.50.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.50.0/manifests"},{"name":"v0.49.0","sha":"d5e12ff89c2d3af684152dd401618533a6f1b67e","kind":"commit","published_at":"2022-06-24T15:05:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.49.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.49.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.49.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.49.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.49.0/manifests"},{"name":"v0.48.1","sha":"03e37044d437294b0aac44a4e9277eb8f6c8be3f","kind":"commit","published_at":"2022-06-16T18:56:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.48.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.48.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.48.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.1/manifests"},{"name":"v0.48.0","sha":"9e72771b851f1657ade0c2214569f675cf0813f3","kind":"commit","published_at":"2022-06-16T14:43:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.48.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.48.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.48.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.0/manifests"},{"name":"v0.47.0","sha":"f15d4a9984428103a60e2298d0755b3adcc32a3a","kind":"commit","published_at":"2022-06-08T21:39:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.47.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.47.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.47.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.47.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.47.0/manifests"},{"name":"v0.46.3","sha":"7cb8e1fc14a278ec5afce379623a47577aba9917","kind":"commit","published_at":"2022-05-25T21:40:08.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.3/manifests"},{"name":"v0.46.2","sha":"d41afe05eb8fecd2906f5db9661910dbc99fc3dd","kind":"commit","published_at":"2022-05-19T20:10:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.2/manifests"},{"name":"v0.46.1","sha":"03ee4fdf5e87907c5a49ae353c44682894bb411c","kind":"commit","published_at":"2022-05-12T16:56:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.1/manifests"},{"name":"v0.46.0","sha":"91e2fd8532254216a83c80891611751d0c8fba7b","kind":"commit","published_at":"2022-05-11T22:35:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.0/manifests"},{"name":"v0.45.1","sha":"37927b8b23cac234289a73aa3e886675d463e477","kind":"commit","published_at":"2022-05-03T13:38:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.45.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.45.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.45.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.1/manifests"},{"name":"v0.45.0","sha":"36973021fad57baf443ffa88181394b87ce109a0","kind":"commit","published_at":"2022-04-29T15:18:45.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.45.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.45.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.45.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.0/manifests"},{"name":"v0.44.1","sha":"248023baafdf2a74f8bdaf98beaee3f40584bb7d","kind":"commit","published_at":"2022-04-15T17:00:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.44.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.44.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.44.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.1/manifests"},{"name":"v0.44.0","sha":"b46d044d7e3afc2ee09fd5ff26635f783628126e","kind":"commit","published_at":"2022-04-11T18:56:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.44.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.44.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.44.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.0/manifests"},{"name":"v0.43.2","sha":"e415bb21e7a609c12dc37a2d6395796fb675e3fe","kind":"commit","published_at":"2022-04-06T21:15:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.43.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.2/manifests"},{"name":"v0.43.1","sha":"748cfbf00647df3366ec3c4ad89d87762625da5a","kind":"commit","published_at":"2022-04-06T16:27:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.43.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.1/manifests"},{"name":"v0.43.0","sha":"f24bbc1838351e4e408368f3312c76db6552e71e","kind":"commit","published_at":"2022-03-31T19:45:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.43.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.0/manifests"},{"name":"v0.42.4","sha":"a7db43f5ec159cad98d0298a2375ee1f4c397894","kind":"commit","published_at":"2022-03-24T14:11:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.4/manifests"},{"name":"v0.42.3","sha":"cc2c0e57a0d02a1719b4e34d0793f09e9699c8b0","kind":"commit","published_at":"2022-03-23T18:34:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.3/manifests"},{"name":"v0.42.2","sha":"c0b547bdb239f00ef43b7f69a61813b710d0b221","kind":"commit","published_at":"2022-03-22T17:19:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.2/manifests"},{"name":"v0.42.1","sha":"283db88dc4d40502219c80af36d073b2f1556007","kind":"commit","published_at":"2022-03-21T18:59:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.1/manifests"},{"name":"v0.42.0","sha":"f4734d28b391800f824a89712897daf19237812c","kind":"commit","published_at":"2022-03-17T14:22:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.0/manifests"},{"name":"v0.41.6","sha":"ee0a1d172c0c6f0da907694b9b48870b33d2852d","kind":"commit","published_at":"2022-03-16T13:10:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.6/manifests"},{"name":"v0.41.5","sha":"b9b3ccecf9438f35977f8e8c6187bd616630640b","kind":"commit","published_at":"2022-03-15T17:02:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.5/manifests"},{"name":"v0.41.4","sha":"c7cf8b0b264562b463dd1f8d0ca7a6d1215ef41f","kind":"commit","published_at":"2022-03-11T18:17:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.4/manifests"},{"name":"v0.41.3","sha":"c7cf8b0b264562b463dd1f8d0ca7a6d1215ef41f","kind":"commit","published_at":"2022-03-11T18:17:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.3/manifests"},{"name":"v0.41.2","sha":"7789506dc65830c32f0bbc41e2be657f9fa473cd","kind":"commit","published_at":"2022-03-11T03:38:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.2/manifests"},{"name":"v0.41.1","sha":"07d3c9af52f241613971ccadd18c8f8ab67abc4e","kind":"commit","published_at":"2022-03-08T15:37:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.1/manifests"},{"name":"v0.41.0","sha":"5123f073c7e5b37a87287d5e9e4a01f4611b3eee","kind":"commit","published_at":"2022-03-07T17:37:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.0/manifests"},{"name":"v0.40.1","sha":"b2ab4671b915d50b523ae77b85e9554e5f8bcf95","kind":"commit","published_at":"2022-03-03T22:13:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.40.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.40.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.40.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.1/manifests"},{"name":"v0.40.0","sha":"1e75cb0418df15f8bc8193b1b8a3b3a8d81cb3b0","kind":"commit","published_at":"2022-03-02T15:09:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.40.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.40.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.40.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.0/manifests"},{"name":"v0.39.3","sha":"1d1a7de31457b0f2974090101cb793ee78eeb9b7","kind":"commit","published_at":"2022-02-26T12:30:38.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.3/manifests"},{"name":"v0.39.2","sha":"24cd39089a82abae50195ab9ea3f7be0ef6a2d51","kind":"commit","published_at":"2022-02-26T01:07:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.2/manifests"},{"name":"v0.39.1","sha":"c89131bcf3851505c2ff5f7ca3ae66b1b6a725d4","kind":"commit","published_at":"2022-02-25T16:32:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.1/manifests"},{"name":"v0.39.0","sha":"6c306efed2811c0c78b599355c82f937fe7a251d","kind":"commit","published_at":"2022-02-24T16:15:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.0/manifests"},{"name":"v0.38.0","sha":"52d2e62cdcc08967ead746820346766e12698488","kind":"commit","published_at":"2022-02-15T17:51:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.38.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.38.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.38.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.38.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.38.0/manifests"},{"name":"v0.37.10","sha":"0ed284212305c76d65687aad6eaabf91142e0ddc","kind":"commit","published_at":"2022-02-07T23:47:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.10","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.10/manifests"},{"name":"v0.37.9","sha":"b78c90d0186c959629722d30fb1ca7c6d27faadb","kind":"commit","published_at":"2022-02-07T22:50:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.9","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.9/manifests"},{"name":"v0.37.8","sha":"2c62651c8279f288d9668039da4a865e9a5d0b2a","kind":"commit","published_at":"2022-02-07T21:55:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.8","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.8/manifests"},{"name":"v0.37.7","sha":"5519a25035e6c6ad46bb4c37ef4e174d1060a257","kind":"commit","published_at":"2022-02-07T17:03:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.7","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.7/manifests"},{"name":"v0.37.6","sha":"950ad681a03a5f6924388f92edcf638b87576992","kind":"commit","published_at":"2022-02-07T15:55:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.6/manifests"},{"name":"v0.37.5","sha":"e474b2f23c1e42d274af511333e0d06b879b169d","kind":"commit","published_at":"2022-02-05T15:23:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.5/manifests"},{"name":"v0.37.4","sha":"e7bef5e511c94940c46bba9a4193dacc7c9e97c5","kind":"commit","published_at":"2022-02-04T21:49:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.4/manifests"},{"name":"v0.37.3","sha":"e4ac7700dd76b9cf30778ef40e9acfd3168dcaeb","kind":"commit","published_at":"2022-02-04T19:44:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.3/manifests"},{"name":"v0.37.2","sha":"d3469801fc1e3eae117049064f751689c64bc8bc","kind":"commit","published_at":"2022-02-04T19:04:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.2/manifests"},{"name":"v0.37.1","sha":"3f50bb8fa74436f36202b2582f02be7f91644ab5","kind":"commit","published_at":"2022-02-04T18:23:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.1/manifests"},{"name":"v0.37.0","sha":"341288ba29d66d36afe80f2a7d8eb9b1e53d0a5a","kind":"commit","published_at":"2022-02-04T17:41:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.0/manifests"},{"name":"v0.36.0","sha":"aebe843c6f0307d5c263c25257caf3e6ea827c78","kind":"commit","published_at":"2022-01-19T16:43:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.36.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.36.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.36.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.36.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.36.0/manifests"},{"name":"v0.35.1","sha":"b77ddfc29c2d93dbc61c25b8f0e726c0e238f43b","kind":"commit","published_at":"2022-01-10T18:40:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.35.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.35.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.35.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.1/manifests"},{"name":"v0.35.0","sha":"5e5312c72ddd4b3d4d6200a5e74e78a6d76aa0c7","kind":"commit","published_at":"2022-01-06T22:52:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.35.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.35.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.35.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.0/manifests"},{"name":"v0.34.0","sha":"7f8cb0bd8068709982ef23e931e1ceaa2dfac955","kind":"commit","published_at":"2021-12-22T20:55:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.34.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.34.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.34.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.34.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.34.0/manifests"},{"name":"v0.33.0","sha":"a27907659d6c43f5bef2f76a9e381f2bf697a64f","kind":"commit","published_at":"2021-12-16T13:55:53.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.33.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.33.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.33.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.33.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.33.0/manifests"},{"name":"v0.32.2","sha":"727b84ce0da67a35899e966eb4408b3e6553ed63","kind":"commit","published_at":"2021-12-14T17:17:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.32.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.2/manifests"},{"name":"v0.32.1","sha":"d3804d1a827c9b1fa9867208de1167a9e62c6e99","kind":"commit","published_at":"2021-12-14T01:49:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.32.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.1/manifests"},{"name":"v0.32.0","sha":"da0b17b719b6d5cabe0819d44f90755c73312de8","kind":"commit","published_at":"2021-12-08T21:25:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.32.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.0/manifests"},{"name":"v0.31.0","sha":"22c4b275e73d70807fca8017d4896d8398b3373f","kind":"commit","published_at":"2021-12-03T16:12:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.31.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.31.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.31.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.31.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.31.0/manifests"},{"name":"v0.30.1","sha":"45ea4177e8a37a56798bacf89c4b6cdd5d056d6e","kind":"commit","published_at":"2021-11-15T19:41:46.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.30.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.30.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.30.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.30.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.30.1/manifests"},{"name":"v0.29.0","sha":"a2882ee810edcbf4db3230e982c316b261eb17cd","kind":"commit","published_at":"2021-10-29T16:00:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.29.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.29.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.29.0/manifests"},{"name":"v0.28.0","sha":"3286a4d4cc88e02e81db4f07d21a9fc6edac2a01","kind":"commit","published_at":"2021-10-28T19:41:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.28.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.28.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.28.0/manifests"},{"name":"v0.27.0","sha":"89242e6ed32528132ac79635a856b7a04a77014f","kind":"commit","published_at":"2021-10-21T18:34:17.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.27.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.27.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.27.0/manifests"},{"name":"v0.26.0","sha":"7a005fec0698a405a618242557e03ceebe1ee650","kind":"commit","published_at":"2021-10-15T17:26:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.26.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.26.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.26.0/manifests"},{"name":"v0.25.0","sha":"b25f5b664b21837aee9130d2e63812431bc64a40","kind":"commit","published_at":"2021-10-07T19:18:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.25.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.25.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.25.0/manifests"},{"name":"v0.24.1","sha":"0395c4744581a3d33bf80656f092b19dd75b32fb","kind":"commit","published_at":"2021-09-27T22:31:59.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.24.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.24.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.24.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.1/manifests"},{"name":"v0.24.0","sha":"6d4d083acccc68455e09dd45a474b3f6b5215006","kind":"commit","published_at":"2021-09-23T00:55:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.24.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.24.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.0/manifests"},{"name":"v0.23.0","sha":"ddfc8e20c0f370d25e7d032b23bef2e3d519506c","kind":"commit","published_at":"2021-09-13T17:06:23.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.23.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.23.0/manifests"},{"name":"v0.22.0","sha":"06dcd3261dadf77ec0d86e7a981eb4aac7008d09","kind":"commit","published_at":"2021-09-03T21:29:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.22.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.22.0/manifests"},{"name":"v0.21.0","sha":"ff828fbac211e1d9e993c309461bd9e0636fc2ec","kind":"commit","published_at":"2021-08-20T17:50:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.21.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.21.0/manifests"},{"name":"v0.20.0","sha":"b0e9b92a257f920bf6b31438a1dba6762fa7390d","kind":"commit","published_at":"2021-08-18T15:00:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.20.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.20.0/manifests"},{"name":"v0.19.1","sha":"fee35dd1753308fc887da744de5d0c66947c7493","kind":"commit","published_at":"2021-06-30T17:10:00.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.19.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.1/manifests"},{"name":"v0.19.0","sha":"2de56c074917b159fdd76fc6b1da974b4c53ca2e","kind":"commit","published_at":"2021-06-29T22:16:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.19.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.0/manifests"},{"name":"v0.18.0","sha":"962e82297c329f728018335858ad619ef3e00648","kind":"commit","published_at":"2021-06-29T18:28:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.18.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.18.0/manifests"},{"name":"v0.17.1","sha":"6dd698d89edee65fdcb7c0b2630b6253ed34deba","kind":"commit","published_at":"2021-06-19T18:32:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.17.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.17.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.17.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.1/manifests"},{"name":"v0.17.0","sha":"801e662633304256a05988c868234a2d0ed5a1ae","kind":"commit","published_at":"2021-06-04T16:50:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.17.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.0/manifests"},{"name":"v0.16.1","sha":"8be0d988e7e793d62afd2e9e2a881428322329cb","kind":"commit","published_at":"2021-05-25T21:13:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.16.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.1/manifests"},{"name":"v0.16.0","sha":"80e23bdb506835cdfe26780abcfd977363bae015","kind":"commit","published_at":"2021-05-25T19:01:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.16.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.0/manifests"},{"name":"v0.15.2","sha":"baa859d2ed084eb7c3d5621a255ad6f277533276","kind":"commit","published_at":"2021-05-12T21:28:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.2/manifests"},{"name":"v0.15.1","sha":"032cecbe7f19ca6f6f07d80f8dc902530e4c7502","kind":"commit","published_at":"2021-04-22T20:38:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"1632fdd85ebe8692328ce82b8ac3a3849dbdc315","kind":"commit","published_at":"2021-04-22T19:56:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.0/manifests"},{"name":"v0.14.0","sha":"26a4dd36a8932c7867fcdd6296f50643be30f8a6","kind":"commit","published_at":"2021-03-20T16:23:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.14.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.14.0/manifests"},{"name":"v0.13.1","sha":"40e9c4b146b2cf52112619969f18453ce7fa3234","kind":"commit","published_at":"2021-02-26T20:59:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.13.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.13.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.1/manifests"},{"name":"v0.13.0","sha":"6d5ff0fd8e7c39c95d30c960c8ae6e95b91cd9d0","kind":"commit","published_at":"2021-02-25T18:47:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.13.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.0/manifests"},{"name":"v0.12.7","sha":"c5e3b631ac354a6b22d912c6ed8972a433b02eae","kind":"commit","published_at":"2021-02-17T13:14:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.7","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.7/manifests"},{"name":"v0.12.6","sha":"8d838b18a85d2c2f0ee976cf2af491913dbcf98b","kind":"commit","published_at":"2021-02-05T16:26:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.6/manifests"},{"name":"v0.12.5","sha":"b22fd987db989debd8e880e7dfe934d39fd016f3","kind":"commit","published_at":"2021-02-01T17:03:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.5/manifests"},{"name":"v0.12.4","sha":"407769e88cdb5232b72aa573d9643e6624b92743","kind":"commit","published_at":"2021-01-27T16:51:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.4/manifests"},{"name":"v0.12.3","sha":"7bcdafe745a58592552393f8cb32f2d58982aa21","kind":"commit","published_at":"2021-01-22T21:10:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.3/manifests"},{"name":"v0.12.2","sha":"0f6288881bf8db287e07576bf8dd067184745759","kind":"commit","published_at":"2021-01-06T02:32:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.2/manifests"},{"name":"v0.12.1","sha":"bb70b0b43ee794c97266cc352a37804f2068acd2","kind":"commit","published_at":"2021-01-05T00:45:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"37b96a241b043f09f6cfee145c19b425e858f939","kind":"commit","published_at":"2021-01-04T21:50:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.0/manifests"},{"name":"v0.11.1","sha":"e299a5355fffa8a200f7076befeaf4a494d495f7","kind":"commit","published_at":"2020-12-23T18:23:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.11.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.1/manifests"},{"name":"v0.11.0","sha":"6aaf9ee712f41c38eefe17a07a1aa43cac9e7990","kind":"commit","published_at":"2020-12-18T21:59:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.11.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"52bac6e2fd1adb3d8852f0fab6536a81ec037b89","kind":"commit","published_at":"2020-12-10T03:20:53.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.10.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.10.0/manifests"},{"name":"v0.9.2","sha":"f87c59b4eb5d5b1396dcc8ad06a07a0706c4b7c5","kind":"commit","published_at":"2020-12-03T21:32:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.9.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.2/manifests"},{"name":"v0.9.1","sha":"6f9ded60ed144de3e837effdee5d96366441e7d3","kind":"commit","published_at":"2020-12-02T12:50:31.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.1/manifests"},{"name":"v0.9.0","sha":"ae71b8832d16b70b0373a518877d169659f07bd9","kind":"commit","published_at":"2020-11-30T16:37:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"71939557e6164712accfd0f7486ef4a6c8459656","kind":"commit","published_at":"2020-11-17T18:21:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.8.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.8.0/manifests"},{"name":"v0.7.1","sha":"dad1d9691c355c643eb3a7f1be1cadde36d913c7","kind":"commit","published_at":"2020-11-12T14:36:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.7.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"9581a0309b570d38037962598d4c30c8d028aaa2","kind":"commit","published_at":"2020-11-11T20:15:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.7.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"b3098f3423d11fe10ea18138177258f6d837d379","kind":"commit","published_at":"2020-11-09T19:18:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.6.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"ecfc471ce51a2a84ec144263592c223816241c7a","kind":"commit","published_at":"2020-11-04T20:47:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.5.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"773581704c736925a7a5485c18bde3f8129f1238","kind":"commit","published_at":"2020-10-30T19:14:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.5.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"f19cb03aa07891e433b5e2e6faa956bc9de83bcf","kind":"commit","published_at":"2020-10-26T15:19:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.4.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"15e2e32103b9aaf6d816fa2c6d9b9dc94ba8c16b","kind":"commit","published_at":"2020-10-23T15:06:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.4.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"1bf1e643ebb49fac1f2f30c1a13ff8b056dec938","kind":"commit","published_at":"2020-10-15T18:41:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.3.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.3.0/manifests"},{"name":"v0.2.0","sha":"956af57d3b8e23d5c607f486b0b65a760a602aad","kind":"commit","published_at":"2020-10-08T18:37:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.2.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"5adfce19e0abdfb0d2c62c80713b90f681c83bf4","kind":"commit","published_at":"2020-09-29T20:33:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0/manifests"},{"name":"v0.1.0-beta.5","sha":"8b81c87d18da91d2a5c8f10fdfb93ec3e05aa1f6","kind":"commit","published_at":"2020-09-26T02:59:19.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.5/manifests"},{"name":"v0.1.0-beta.4","sha":"676544b6ab7a5b70af7c2d3d2d34b23c50996900","kind":"commit","published_at":"2020-08-10T22:28:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.4/manifests"},{"name":"v0.1.0-beta.3","sha":"2d452bf59e0f44de6051ac3f316c8afafe0a929a","kind":"commit","published_at":"2020-08-10T14:33:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.3/manifests"},{"name":"v0.1.0-beta.2","sha":"06f8355fce7901bf88493323831b235ef068dc4a","kind":"commit","published_at":"2020-07-27T19:13:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.2/manifests"},{"name":"v0.1.0-beta.1","sha":"19eadde9ca03c89f7325b8ff09ba8114abbe4dcf","kind":"commit","published_at":"2020-07-27T13:55:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.1/manifests"}]},"repo_metadata_updated_at":"2026-08-07T23:36:13.619Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":3.4910977008627997,"forks_count":4.159393546456536,"docker_downloads_count":null,"average":1.9126228118298338},"purl":"pkg:apk/alpine/syft?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.18","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-22T11:00:46.375Z","issues_count":731,"pull_requests_count":2255,"avg_time_to_close_issue":13448535.886297377,"avg_time_to_close_pull_request":877371.7434279706,"issues_closed_count":343,"pull_requests_closed_count":1902,"pull_request_authors_count":150,"issue_authors_count":381,"avg_comments_per_issue":2.1299589603283176,"avg_comments_per_pull_request":0.5197339246119734,"merged_pull_requests_count":1710,"bot_issues_count":11,"bot_pull_requests_count":1193,"past_year_issues_count":194,"past_year_pull_requests_count":931,"past_year_avg_time_to_close_issue":1820259.3389830508,"past_year_avg_time_to_close_pull_request":292805.3951612903,"past_year_issues_closed_count":59,"past_year_pull_requests_closed_count":744,"past_year_pull_request_authors_count":63,"past_year_issue_authors_count":127,"past_year_avg_comments_per_issue":0.9536082474226805,"past_year_avg_comments_per_pull_request":0.32438238453276047,"past_year_bot_issues_count":7,"past_year_bot_pull_requests_count":593,"past_year_merged_pull_requests_count":666,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":316,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2023-05-23T09:59:34.514Z","updated_at":"2023-05-23T09:59:34.514Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.18","url":"https://pkgs.alpinelinux.org/packages?branch=v3.18","ecosystem":"alpine","default":false,"packages_count":20068,"maintainers_count":367,"namespaces_count":2,"keywords_count":3640,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1213},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-05-22T10:43:30.622Z","updated_at":"2026-08-10T05:08:36.172Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/namespaces"}},{"id":7782070,"name":"syft-fish-completion","ecosystem":"alpine","description":"Fish completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":7,"first_release_published_at":"2023-05-07T11:41:18.000Z","latest_release_published_at":"2023-11-17T20:59:57.000Z","latest_release_number":"0.84.1-r4","last_synced_at":"2026-04-08T18:07:25.767Z","created_at":"2023-05-22T15:00:50.821Z","updated_at":"2026-08-07T23:36:14.403Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.18/community/x86_64/syft-fish-completion","install_command":"apk add syft-fish-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2025-10-20T14:22:16.000Z","size":23003,"stargazers_count":7796,"open_issues_count":500,"forks_count":720,"subscribers_count":62,"default_branch":"main","last_synced_at":"2025-10-20T16:13:38.101Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2025-10-20T14:24:07.000Z","dependencies_parsed_at":"2023-12-20T09:43:51.606Z","dependency_job_id":"3d1fd421-c43b-4d60-87a0-71ec0266d70f","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":240,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":280449175,"owners_count":26332601,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-22T02:00:06.515Z","response_time":63,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"anchore","name":"Anchore, Inc.","uuid":"16208487","kind":"organization","description":"","email":"info@anchore.com","website":"https://anchore.com/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16208487?v=4","repositories_count":43,"last_synced_at":"2023-03-02T09:35:13.089Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/anchore","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-13T02:25:02.273Z","updated_at":"2023-03-02T09:35:13.093Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore/repositories"},"tags":[{"name":"v1.34.2","sha":"0c98a364d503789ff8d7f122763bb8748de9772f","kind":"tag","published_at":"2025-10-16T12:19:26.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.34.2","html_url":"https://github.com/anchore/syft/releases/tag/v1.34.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.34.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.2/manifests"},{"name":"v1.34.1","sha":"e9a8bc5ab97f94b7f9210d7a0f4a981cdbb22232","kind":"tag","published_at":"2025-10-15T15:27:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.34.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.34.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.34.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.1/manifests"},{"name":"v1.34.0","sha":"6d790ec6ec98b263dae0c54259859b35c3527e1b","kind":"tag","published_at":"2025-10-14T22:25:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.34.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.34.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.34.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.0/manifests"},{"name":"v1.33.0","sha":"b87b9191497c2d410b42c05591347d428129fd2a","kind":"tag","published_at":"2025-09-15T20:38:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.33.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.33.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.33.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.33.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.33.0/manifests"},{"name":"v1.32.0","sha":"2d8e337d3469712c7d92770792f0117ad82c4ad3","kind":"tag","published_at":"2025-08-26T21:47:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.32.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.32.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.32.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.32.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.32.0/manifests"},{"name":"v1.31.0","sha":"ab9db0024ed35ab6a4e33e539593f5a3c58a5594","kind":"tag","published_at":"2025-08-13T14:50:45.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.31.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.31.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.31.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.31.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.31.0/manifests"},{"name":"v1.30.0","sha":"49736e7c4acd3cb1aed2d3a8c8cdcd696ac77166","kind":"tag","published_at":"2025-08-08T18:21:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.30.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.30.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.30.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.30.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.30.0/manifests"},{"name":"v1.29.1","sha":"386ef842d99a72027fb5fd1085fde87883640eaf","kind":"tag","published_at":"2025-07-30T18:16:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.29.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.29.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.29.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.1/manifests"},{"name":"v1.29.0","sha":"6f36b586ba1cc49074573d07ca397d18e9eecd16","kind":"tag","published_at":"2025-07-21T19:36:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.29.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.29.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.0/manifests"},{"name":"v1.28.0","sha":"e8b62ab9aca2e896ab608c118619c5a7831bc737","kind":"tag","published_at":"2025-07-02T16:25:07.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.28.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.28.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.28.0/manifests"},{"name":"v1.27.1","sha":"10f06317104361183b4cb803c0e6ac1727257551","kind":"tag","published_at":"2025-06-12T13:39:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.27.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.27.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.27.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.1/manifests"},{"name":"v1.27.0","sha":"18f9b5ab58aa04dda61a3eed8123bd89470befe9","kind":"tag","published_at":"2025-06-09T18:36:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.27.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.27.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.0/manifests"},{"name":"v1.26.1","sha":"7bfb4c86a6d7e5343c45c2844a232b6c7ba4c51c","kind":"tag","published_at":"2025-05-22T12:36:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.26.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.26.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.26.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.1/manifests"},{"name":"v1.26.0","sha":"ac883f52edb8ca1f5a0a61d12c288d4b34ea3897","kind":"tag","published_at":"2025-05-20T21:27:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.26.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.26.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.0/manifests"},{"name":"v1.25.1","sha":"db77b54c019c9aae142d13ca642ddb56d0deefa6","kind":"tag","published_at":"2025-05-16T18:53:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.25.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.25.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.25.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.1/manifests"},{"name":"v1.25.0","sha":"2d4fe513ecec7af9626b9dada586c7a0ff63a67d","kind":"tag","published_at":"2025-05-16T16:29:38.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.25.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.25.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.0/manifests"},{"name":"v1.24.0","sha":"3c7018a853ab7b311db9ff70e1cf3113b46d9c0c","kind":"tag","published_at":"2025-05-14T14:51:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.24.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.24.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.24.0/manifests"},{"name":"v1.23.1","sha":"a714fb8391471c6ddf6e583229d982d1316d64a8","kind":"tag","published_at":"2025-04-25T14:52:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.23.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.23.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.23.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.1/manifests"},{"name":"v1.23.0","sha":"4211d796672ab21250a4d6fd8e45204d6dc00d0e","kind":"tag","published_at":"2025-04-24T20:16:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.23.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.0/manifests"},{"name":"v1.22.0","sha":"9ab83874ed21c07479d8eeddd88a6894e1ff8537","kind":"tag","published_at":"2025-04-01T14:37:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.22.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.22.0/manifests"},{"name":"v1.21.0","sha":"7bdbfc04781a18827c30a505d64a8671c9827bd7","kind":"tag","published_at":"2025-03-17T18:52:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.21.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.21.0/manifests"},{"name":"v1.20.0","sha":"46522bcc5dff8b65b61a7cda1393abe515802306","kind":"tag","published_at":"2025-02-21T20:44:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.20.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.20.0/manifests"},{"name":"v1.19.0","sha":"222e6548a96f8c80015c1d24f01dea3052a04893","kind":"tag","published_at":"2025-01-22T19:57:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.19.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.19.0/manifests"},{"name":"v1.18.1","sha":"5e16e5031a13f8a11057feb8544decebfc43b4ed","kind":"tag","published_at":"2024-12-13T18:41:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.18.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.18.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.18.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.1/manifests"},{"name":"v1.18.0","sha":"d38efb0b7fb7106909bc532a4efc68b78a917a34","kind":"tag","published_at":"2024-12-09T21:02:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.18.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.0/manifests"},{"name":"v1.17.0","sha":"a8d4202d77b6b31e75ce5af09a8b03ad14e533d3","kind":"tag","published_at":"2024-11-21T14:39:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.17.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.17.0/manifests"},{"name":"v1.16.0","sha":"8a41d772509d37267a65e0b425808e883e4b9dce","kind":"tag","published_at":"2024-11-04T22:29:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.16.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.16.0/manifests"},{"name":"v1.15.0","sha":"55cc1877ef246d8cabfd9bbeb0a8747b59c03431","kind":"tag","published_at":"2024-10-28T21:11:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.15.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.15.0/manifests"},{"name":"v1.14.2","sha":"e4e985b9b05b9570648399adf292ab7f659b4cef","kind":"tag","published_at":"2024-10-21T17:20:27.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.14.2","html_url":"https://github.com/anchore/syft/releases/tag/v1.14.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.14.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.2/manifests"},{"name":"v1.14.1","sha":"754cebee6414c614acf03ee0f87abfcf6176e051","kind":"tag","published_at":"2024-10-15T13:04:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.14.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.14.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.14.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.1/manifests"},{"name":"v1.14.0","sha":"ccbee94b876240284c25c8931c6233fc71a5b7fb","kind":"tag","published_at":"2024-10-07T20:40:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.14.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.0/manifests"},{"name":"v1.13.0","sha":"01de99b25304ec95197c00b21d698f127b31a887","kind":"tag","published_at":"2024-09-24T13:28:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.13.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.13.0/manifests"},{"name":"v1.12.2","sha":"fcd5ec951de6b3fc1f1aa2a36968356d2eb22170","kind":"tag","published_at":"2024-09-11T14:12:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.12.2","html_url":"https://github.com/anchore/syft/releases/tag/v1.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.2/manifests"},{"name":"v1.12.1","sha":"c33a51d3d839ba619ea2217ee00a56be23f9fb9f","kind":"tag","published_at":"2024-09-10T20:42:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.12.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.1/manifests"},{"name":"v1.12.0","sha":"dbc4238f63c027efc09ce5fe51e069c1145f6846","kind":"tag","published_at":"2024-09-10T17:37:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.12.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.0/manifests"},{"name":"v1.11.1","sha":"95b4a88256bddebb91831250f28f602f8c36552a","kind":"tag","published_at":"2024-08-20T16:25:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.11.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.1/manifests"},{"name":"v1.11.0","sha":"19cc664cf8e7020dd692a62efcbba98ab670bde9","kind":"tag","published_at":"2024-08-09T17:52:21.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.11.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.0/manifests"},{"name":"v1.10.0","sha":"a4b5dcd0df80f6a58c8610e25104647710c1da5d","kind":"tag","published_at":"2024-07-30T16:13:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.10.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.10.0/manifests"},{"name":"v1.9.0","sha":"4e09908ba124dca7e6f1f6e7dc4f4663fae658ca","kind":"tag","published_at":"2024-07-11T17:32:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.9.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.9.0/manifests"},{"name":"v1.8.0","sha":"1eae9333a9450c135ff929578597c79b01c9f5ff","kind":"tag","published_at":"2024-06-24T15:43:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.8.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.8.0/manifests"},{"name":"v1.7.0","sha":"22d57314826fce1bff469d8173884489f8212925","kind":"tag","published_at":"2024-06-14T19:48:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.7.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.7.0/manifests"},{"name":"v1.6.0","sha":"c43f4fb416c34c1c4b3997373689d8d4c0fb9b36","kind":"tag","published_at":"2024-06-10T15:39:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.6.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"ac34808b9c55bb274b1205f9b5d9cf495239577d","kind":"tag","published_at":"2024-05-28T15:11:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.5.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.5.0/manifests"},{"name":"v1.4.1","sha":"c200896a9644f9b6bd4bc3785c848276c33bb53c","kind":"tag","published_at":"2024-05-09T19:45:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.4.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.1/manifests"},{"name":"v1.4.0","sha":"4194a2cd34d2f15dd9a96774ba2fbc5463db4c58","kind":"tag","published_at":"2024-05-09T18:14:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.4.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"87cd6c8c48239a20c413f6461e90000ff30ee601","kind":"tag","published_at":"2024-04-26T15:01:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.3.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"dde5d349b1eef740c285255e6a9e3a8f5c9938e1","kind":"tag","published_at":"2024-04-12T18:31:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.2.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.2.0/manifests"},{"name":"v1.1.1","sha":"1e31356c49bf2c30fd80c833482e1fbe4133ff83","kind":"tag","published_at":"2024-04-04T14:52:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.1.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"f4e18961b979f5e6d0cc3b1e4fce608c8ceb29d8","kind":"tag","published_at":"2024-03-25T21:41:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.1.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"1b121ac3f4d589060ddf1fac0bcd6871ea4731e3","kind":"tag","published_at":"2024-03-06T19:51:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.0.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"356f7c92b464b69be3a2a898cd98a63037eeadcc","kind":"tag","published_at":"2024-02-29T14:50:50.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.0.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.0/manifests"},{"name":"v0.105.1","sha":"928511ea0f1449e057e8057e38743d258b22476b","kind":"tag","published_at":"2024-02-26T16:52:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.105.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.105.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.105.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.1/manifests"},{"name":"v0.105.0","sha":"65cadda48653d2452a7e41a47a60d2934e8fcb07","kind":"tag","published_at":"2024-02-14T21:16:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.105.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.105.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.105.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.0/manifests"},{"name":"v0.104.0","sha":"bd0cb916df4376a06e56ef7f3cc0da6659d7c2c6","kind":"tag","published_at":"2024-02-07T20:51:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.104.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.104.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.104.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.104.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.104.0/manifests"},{"name":"v0.103.1","sha":"377538e4a692b8070716eb091456b112ccc2cb81","kind":"tag","published_at":"2024-01-31T17:09:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.103.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.103.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.103.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.1/manifests"},{"name":"v0.103.0","sha":"bbe7fa180a38079318fd4a75d6276720374ccecd","kind":"tag","published_at":"2024-01-31T16:34:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.103.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.103.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.103.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.0/manifests"},{"name":"v0.102.0","sha":"d7c51e5c82de8b64b992f5962842c20903b5934a","kind":"tag","published_at":"2024-01-26T14:34:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.102.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.102.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.102.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.102.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.102.0/manifests"},{"name":"v0.101.1","sha":"3eab5932e5271eea5506ab9710239b1415c827f8","kind":"tag","published_at":"2024-01-19T22:02:00.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.101.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.101.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.101.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.1/manifests"},{"name":"v0.101.0","sha":"297ece69045d6d73a184ed955a99d90769b1cb45","kind":"tag","published_at":"2024-01-17T20:41:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.101.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.101.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.101.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.0/manifests"},{"name":"v0.100.0","sha":"a16a4ad6c993aaaa1ec502667c215b0e8c8e51ff","kind":"tag","published_at":"2024-01-05T21:33:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.100.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.100.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.100.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.100.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.100.0/manifests"},{"name":"v0.99.0","sha":"3cffa0b7fd276a35123c48e45407c4f402f2c58f","kind":"tag","published_at":"2023-12-21T16:18:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.99.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.99.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.99.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.99.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.99.0/manifests"},{"name":"v0.98.0","sha":"5c8dd4c3a7632dcfd999bab7a5b73c3180f1b628","kind":"tag","published_at":"2023-11-29T14:52:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.98.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.98.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.98.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.98.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.98.0/manifests"},{"name":"v0.97.1","sha":"7cfb5f630a7a2105d49d65eaaaa2e2c06e4eda73","kind":"tag","published_at":"2023-11-17T21:03:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.97.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.97.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.97.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.1/manifests"},{"name":"v0.97.0","sha":"1c787f436fca20cbec4541f978ed2a634b880c97","kind":"tag","published_at":"2023-11-16T22:56:21.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.97.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.97.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.97.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.0/manifests"},{"name":"v0.96.0","sha":"0891d35e0774f175e3a3f170edcce9ad2f4f015b","kind":"tag","published_at":"2023-11-09T14:04:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.96.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.96.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.96.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.96.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.96.0/manifests"},{"name":"v0.95.0","sha":"9b98785aab9346999a0b5e9f5e4b4e63a1b1916c","kind":"tag","published_at":"2023-11-07T16:43:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.95.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.95.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.95.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.95.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.95.0/manifests"},{"name":"v0.94.0","sha":"8f6bdde6662aa8050a71eadbdb7bd5a3b079a56d","kind":"tag","published_at":"2023-10-20T17:21:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.94.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.94.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.94.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.94.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.94.0/manifests"},{"name":"v0.93.0","sha":"0748945c8341a06415ac80e624b84e8d3f548d39","kind":"tag","published_at":"2023-10-10T17:27:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.93.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.93.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.93.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.93.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.93.0/manifests"},{"name":"v0.92.0","sha":"8f57d22f639e132cbd87324abacd864232c611ce","kind":"tag","published_at":"2023-09-27T15:40:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.92.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.92.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.92.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.92.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.92.0/manifests"},{"name":"v0.91.0","sha":"b7fa75d7f82a6816d307805ac07e6965c799e938","kind":"tag","published_at":"2023-09-20T19:41:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.91.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.91.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.91.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.91.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.91.0/manifests"},{"name":"v0.90.0","sha":"b82c0ffc3417bdc8c38f4633af95a668ec29fa35","kind":"commit","published_at":"2023-09-11T16:12:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.90.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.90.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.90.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.90.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.90.0/manifests"},{"name":"v0.89.0","sha":"b454160549bbd199e0a5693750856f30b41767f7","kind":"commit","published_at":"2023-08-31T14:50:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.89.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.89.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.89.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.89.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.89.0/manifests"},{"name":"v0.88.0","sha":"dd09e0362e46bee7285e0fca5ed96e398c314380","kind":"commit","published_at":"2023-08-25T20:45:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.88.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.88.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.88.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.88.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.88.0/manifests"},{"name":"v0.87.1","sha":"4762ba0943785fe778276893388e839e01787b45","kind":"commit","published_at":"2023-08-17T16:55:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.87.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.87.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.87.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.1/manifests"},{"name":"v0.87.0","sha":"b3d7ba569b64376cf33df717e3bc40d8375e033b","kind":"commit","published_at":"2023-08-14T15:37:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.87.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.87.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.87.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.0/manifests"},{"name":"v0.86.1","sha":"e2f7befbfbf88053dfb2007c6499a4bb2d232c3c","kind":"commit","published_at":"2023-07-31T17:29:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.86.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.86.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.86.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.1/manifests"},{"name":"v0.86.0","sha":"f14742b3f3a6f8cd4bc696dbafee53ab1d665da7","kind":"commit","published_at":"2023-07-31T16:02:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.86.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.86.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.86.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.0/manifests"},{"name":"v0.85.0","sha":"4fc17edd146af34ab06f5b0443ef8ddac3aaf076","kind":"commit","published_at":"2023-07-12T17:14:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.85.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.85.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.85.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.85.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.85.0/manifests"},{"name":"v0.84.1","sha":"791d1f955215f1dad383c9835e4d3c01267dc0f5","kind":"commit","published_at":"2023-06-28T16:05:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.84.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.84.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.84.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.1/manifests"},{"name":"v0.84.0","sha":"5d54e6e847192f63db80c9a7ee23197476c632ce","kind":"commit","published_at":"2023-06-20T16:08:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.84.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.84.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.84.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.0/manifests"},{"name":"v0.83.1","sha":"a1bba36d514c3ff0f34635b9cdc9f07a92ea793b","kind":"commit","published_at":"2023-06-14T15:45:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.83.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.83.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.83.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.1/manifests"},{"name":"v0.83.0","sha":"1764e1c3f6bd66781f8350d957a1f95e4d9ad3de","kind":"commit","published_at":"2023-06-05T19:04:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.83.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.83.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.83.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.0/manifests"},{"name":"v0.82.0","sha":"4ac8fdf6df0da4cd6f76820dbec9f490ee56bcba","kind":"commit","published_at":"2023-05-23T16:58:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.82.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.82.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.82.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.82.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.82.0/manifests"},{"name":"v0.81.0","sha":"334a775cb9cd6bf50033de1bb3aa04f46b669f5d","kind":"commit","published_at":"2023-05-19T14:21:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.81.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.81.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.81.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.81.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.81.0/manifests"},{"name":"v0.80.0","sha":"0f1aed447751f92dcc0165b56aa474ec9706805e","kind":"commit","published_at":"2023-05-05T15:41:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.80.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.80.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.80.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.80.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.80.0/manifests"},{"name":"v0.79.0","sha":"b2b332e8b2b66af0905e98b54ebd713a922be1a8","kind":"commit","published_at":"2023-04-21T13:34:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.79.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.79.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.79.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.79.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.79.0/manifests"},{"name":"v0.78.0","sha":"244b797a199458f504758c0e3a775572a021e629","kind":"commit","published_at":"2023-04-17T16:26:07.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.78.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.78.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.78.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.78.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.78.0/manifests"},{"name":"v0.77.0","sha":"dd30c99bc2439cb91e3d084eb21e1040dd5a54dc","kind":"commit","published_at":"2023-04-11T14:13:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.77.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.77.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.77.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.77.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.77.0/manifests"},{"name":"v0.76.1","sha":"7845381331e873f65fd5013f44b7d85168ced5f5","kind":"commit","published_at":"2023-04-05T17:59:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.76.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.76.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.76.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.1/manifests"},{"name":"v0.76.0","sha":"dfcc07e5122217ca9e2fc75817c593356fc0c405","kind":"commit","published_at":"2023-03-31T14:04:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.76.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.76.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.76.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.0/manifests"},{"name":"v0.75.0","sha":"cc0a376aba43e7f9c5fe66320643f72088533838","kind":"commit","published_at":"2023-03-13T17:26:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.75.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.75.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.75.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.75.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.75.0/manifests"},{"name":"v0.74.1","sha":"41cbbe09b205e3b80e8a57d4f7a509b5f938557d","kind":"commit","published_at":"2023-03-07T17:54:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.74.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.74.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.74.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.1/manifests"},{"name":"v0.74.0","sha":"5f90d0371873faf5eb8f2e748909b32294be6263","kind":"commit","published_at":"2023-03-01T20:35:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.74.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.74.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.74.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.0/manifests"},{"name":"v0.72.1","sha":"be71f7c6aea3fd663e0f059df1d8060c2f6e916d","kind":"commit","published_at":"2023-02-22T21:34:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.72.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.72.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.72.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.1/manifests"},{"name":"v0.73.0","sha":"aa151da5fe2a1b11502c852fd2d3ad462c1d245f","kind":"commit","published_at":"2023-02-22T19:08:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.73.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.73.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.73.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.73.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.73.0/manifests"},{"name":"v0.72.0","sha":"2642a3616170ccbda9d8c8cb4f4a6b0fd5c63da9","kind":"commit","published_at":"2023-02-16T15:22:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.72.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.72.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.72.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.0/manifests"},{"name":"v0.71.0","sha":"88c81d33edc67b0b9636d0046417a9373ac8b74f","kind":"commit","published_at":"2023-02-09T16:35:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.71.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.71.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.71.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.71.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.71.0/manifests"},{"name":"v0.70.0","sha":"9995950c70e849f9921919faffbfcf46401f71f3","kind":"commit","published_at":"2023-02-03T18:06:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.70.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.70.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.70.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.70.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.70.0/manifests"},{"name":"v0.69.1","sha":"1530ef354ffaf59cef6a02c949f2cdb82353954f","kind":"commit","published_at":"2023-01-31T16:53:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.69.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.69.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.69.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.1/manifests"},{"name":"v0.69.0","sha":"b81c9805dcc9bf25dad7659fd9c2bbf7dd3f3d90","kind":"commit","published_at":"2023-01-30T18:47:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.69.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.69.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.69.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.0/manifests"},{"name":"v0.68.1","sha":"4c0aef09b8d7fb78200b04416f474b90b79370de","kind":"commit","published_at":"2023-01-25T17:18:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.68.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.68.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.68.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.1/manifests"},{"name":"v0.68.0","sha":"e58050bac045be672621047d5699b88884e2da62","kind":"commit","published_at":"2023-01-20T14:49:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.68.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.68.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.68.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.0/manifests"},{"name":"v0.66.2","sha":"03971ace43b877e371c13e3f786c1f6c3a4ec507","kind":"commit","published_at":"2023-01-17T21:26:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.66.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.2/manifests"},{"name":"v0.66.1","sha":"ac94bf530c7b1e6ee5df1ed0f9f6454fca8bc918","kind":"commit","published_at":"2023-01-12T22:42:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.66.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.1/manifests"},{"name":"v0.66.0","sha":"260cb4c72d001b63e7462ed214caeb0aab605714","kind":"commit","published_at":"2023-01-12T20:03:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.66.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.0/manifests"},{"name":"v0.65.0","sha":"bc1edb9c8a2fb4824bfdcac6147edc2bbf47aaf6","kind":"commit","published_at":"2023-01-04T16:34:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.65.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.65.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.65.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.65.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.65.0/manifests"},{"name":"v0.64.0","sha":"e1e489a2849c8432781a7cb58b257fa935efa1cf","kind":"commit","published_at":"2022-12-23T13:37:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.64.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.64.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.64.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.64.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.64.0/manifests"},{"name":"v0.63.0","sha":"23a3173c9f2461e5906d1b9e3ac20b4806d74777","kind":"commit","published_at":"2022-12-12T17:55:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.63.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.63.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.63.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.63.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.63.0/manifests"},{"name":"v0.62.3","sha":"247b054ab56f848c477495218754166272f470b5","kind":"commit","published_at":"2022-11-30T16:11:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.3/manifests"},{"name":"v0.62.2","sha":"0cbd0cc70377d5b1b11b808fbbf9ddec450c68ee","kind":"commit","published_at":"2022-11-28T15:43:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.2/manifests"},{"name":"v0.62.1","sha":"098e61dcc81d7a6d666bc62a2166c9b8f32c61bc","kind":"commit","published_at":"2022-11-21T14:26:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.1/manifests"},{"name":"v0.62.0","sha":"da4b2df57640e03f273a2e7e9b04eca40555e139","kind":"commit","published_at":"2022-11-18T18:42:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.0/manifests"},{"name":"v0.61.0","sha":"67888ee855ad37948bfee98e3aa7d592b4f91e95","kind":"commit","published_at":"2022-11-18T14:45:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.61.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.61.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.61.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.61.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.61.0/manifests"},{"name":"v0.60.3","sha":"bc9740d50a38e9660f2f98ed91d84c6d8799cf70","kind":"commit","published_at":"2022-11-03T14:38:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.3/manifests"},{"name":"v0.60.2","sha":"35f0f2931e310882fe7117c41d57a185d72ca498","kind":"commit","published_at":"2022-11-02T14:05:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.2/manifests"},{"name":"v0.60.1","sha":"ba57f3db5189c632ecaa02f9cf0b634c5a55099c","kind":"commit","published_at":"2022-11-01T16:28:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.1/manifests"},{"name":"v0.60.0","sha":"4c5c6f6319d931f324c3a15a88ba2593109cbbe2","kind":"commit","published_at":"2022-11-01T14:30:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.0/manifests"},{"name":"v0.59.0","sha":"41bc6bb410352845f22766e27dd48ba93aa825a4","kind":"commit","published_at":"2022-10-14T19:54:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.59.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.59.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.59.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.59.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.59.0/manifests"},{"name":"v0.58.0","sha":"b9b13d5525df89194d332467f692bc28bc68d07f","kind":"commit","published_at":"2022-09-29T18:45:59.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.58.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.58.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.58.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.58.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.58.0/manifests"},{"name":"v0.57.0","sha":"04d288b3643f906255af88108f27712bb2be5b63","kind":"commit","published_at":"2022-09-19T20:08:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.57.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.57.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.57.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.57.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.57.0/manifests"},{"name":"v0.56.0","sha":"c5dca001e267d2a91ff82e53ca72535ceef6af02","kind":"commit","published_at":"2022-09-09T18:59:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.56.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.56.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.56.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.56.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.56.0/manifests"},{"name":"v0.55.0","sha":"a7966a4d9d8155be788af33fe5e5af2e40043f82","kind":"commit","published_at":"2022-08-29T19:28:19.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.55.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.55.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.55.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.55.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.55.0/manifests"},{"name":"v0.54.0","sha":"21eb77206020c04c9ca5316562e32179c73926a9","kind":"commit","published_at":"2022-08-16T18:14:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.54.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.54.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.54.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.54.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.54.0/manifests"},{"name":"v0.53.4","sha":"69bde44c6e50a5838cdd2c2c821edb0111013178","kind":"commit","published_at":"2022-08-03T16:24:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.4/manifests"},{"name":"v0.53.3","sha":"042304ee4c614708b4e293f525c5d0a435ede2cf","kind":"commit","published_at":"2022-08-03T13:46:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.3/manifests"},{"name":"v0.53.2","sha":"69fb0a6f3bd6f0281e0d466ab7db23090a3ebc65","kind":"commit","published_at":"2022-08-02T19:25:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.2/manifests"},{"name":"v0.53.1","sha":"f5d02d4e527d3fe1906fd209ce036f58049979f3","kind":"commit","published_at":"2022-08-02T15:44:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.1/manifests"},{"name":"v0.53.0","sha":"b7f587f5dcae631b76d2f80ed2a3b9a207972d80","kind":"commit","published_at":"2022-08-02T13:42:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.0/manifests"},{"name":"v0.52.0","sha":"ba9adb17ebb510a2a3bd2b641738b1d9235e1f3e","kind":"commit","published_at":"2022-07-21T13:17:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.52.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.52.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.52.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.52.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.52.0/manifests"},{"name":"v0.51.0","sha":"470b13045bbbf150f3c79d1487a01ae6acc5592d","kind":"commit","published_at":"2022-07-11T14:09:08.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.51.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.51.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.51.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.51.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.51.0/manifests"},{"name":"v0.50.0","sha":"69134ed3b54bc8b1d86d868611f7d069ce3290a8","kind":"commit","published_at":"2022-07-05T15:57:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.50.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.50.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.50.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.50.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.50.0/manifests"},{"name":"v0.49.0","sha":"d5e12ff89c2d3af684152dd401618533a6f1b67e","kind":"commit","published_at":"2022-06-24T15:05:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.49.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.49.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.49.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.49.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.49.0/manifests"},{"name":"v0.48.1","sha":"03e37044d437294b0aac44a4e9277eb8f6c8be3f","kind":"commit","published_at":"2022-06-16T18:56:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.48.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.48.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.48.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.1/manifests"},{"name":"v0.48.0","sha":"9e72771b851f1657ade0c2214569f675cf0813f3","kind":"commit","published_at":"2022-06-16T14:43:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.48.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.48.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.48.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.0/manifests"},{"name":"v0.47.0","sha":"f15d4a9984428103a60e2298d0755b3adcc32a3a","kind":"commit","published_at":"2022-06-08T21:39:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.47.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.47.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.47.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.47.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.47.0/manifests"},{"name":"v0.46.3","sha":"7cb8e1fc14a278ec5afce379623a47577aba9917","kind":"commit","published_at":"2022-05-25T21:40:08.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.3/manifests"},{"name":"v0.46.2","sha":"d41afe05eb8fecd2906f5db9661910dbc99fc3dd","kind":"commit","published_at":"2022-05-19T20:10:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.2/manifests"},{"name":"v0.46.1","sha":"03ee4fdf5e87907c5a49ae353c44682894bb411c","kind":"commit","published_at":"2022-05-12T16:56:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.1/manifests"},{"name":"v0.46.0","sha":"91e2fd8532254216a83c80891611751d0c8fba7b","kind":"commit","published_at":"2022-05-11T22:35:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.0/manifests"},{"name":"v0.45.1","sha":"37927b8b23cac234289a73aa3e886675d463e477","kind":"commit","published_at":"2022-05-03T13:38:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.45.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.45.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.45.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.1/manifests"},{"name":"v0.45.0","sha":"36973021fad57baf443ffa88181394b87ce109a0","kind":"commit","published_at":"2022-04-29T15:18:45.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.45.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.45.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.45.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.0/manifests"},{"name":"v0.44.1","sha":"248023baafdf2a74f8bdaf98beaee3f40584bb7d","kind":"commit","published_at":"2022-04-15T17:00:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.44.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.44.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.44.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.1/manifests"},{"name":"v0.44.0","sha":"b46d044d7e3afc2ee09fd5ff26635f783628126e","kind":"commit","published_at":"2022-04-11T18:56:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.44.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.44.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.44.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.0/manifests"},{"name":"v0.43.2","sha":"e415bb21e7a609c12dc37a2d6395796fb675e3fe","kind":"commit","published_at":"2022-04-06T21:15:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.43.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.2/manifests"},{"name":"v0.43.1","sha":"748cfbf00647df3366ec3c4ad89d87762625da5a","kind":"commit","published_at":"2022-04-06T16:27:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.43.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.1/manifests"},{"name":"v0.43.0","sha":"f24bbc1838351e4e408368f3312c76db6552e71e","kind":"commit","published_at":"2022-03-31T19:45:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.43.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.0/manifests"},{"name":"v0.42.4","sha":"a7db43f5ec159cad98d0298a2375ee1f4c397894","kind":"commit","published_at":"2022-03-24T14:11:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.4/manifests"},{"name":"v0.42.3","sha":"cc2c0e57a0d02a1719b4e34d0793f09e9699c8b0","kind":"commit","published_at":"2022-03-23T18:34:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.3/manifests"},{"name":"v0.42.2","sha":"c0b547bdb239f00ef43b7f69a61813b710d0b221","kind":"commit","published_at":"2022-03-22T17:19:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.2/manifests"},{"name":"v0.42.1","sha":"283db88dc4d40502219c80af36d073b2f1556007","kind":"commit","published_at":"2022-03-21T18:59:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.1/manifests"},{"name":"v0.42.0","sha":"f4734d28b391800f824a89712897daf19237812c","kind":"commit","published_at":"2022-03-17T14:22:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.0/manifests"},{"name":"v0.41.6","sha":"ee0a1d172c0c6f0da907694b9b48870b33d2852d","kind":"commit","published_at":"2022-03-16T13:10:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.6/manifests"},{"name":"v0.41.5","sha":"b9b3ccecf9438f35977f8e8c6187bd616630640b","kind":"commit","published_at":"2022-03-15T17:02:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.5/manifests"},{"name":"v0.41.4","sha":"c7cf8b0b264562b463dd1f8d0ca7a6d1215ef41f","kind":"commit","published_at":"2022-03-11T18:17:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.4/manifests"},{"name":"v0.41.3","sha":"c7cf8b0b264562b463dd1f8d0ca7a6d1215ef41f","kind":"commit","published_at":"2022-03-11T18:17:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.3/manifests"},{"name":"v0.41.2","sha":"7789506dc65830c32f0bbc41e2be657f9fa473cd","kind":"commit","published_at":"2022-03-11T03:38:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.2/manifests"},{"name":"v0.41.1","sha":"07d3c9af52f241613971ccadd18c8f8ab67abc4e","kind":"commit","published_at":"2022-03-08T15:37:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.1/manifests"},{"name":"v0.41.0","sha":"5123f073c7e5b37a87287d5e9e4a01f4611b3eee","kind":"commit","published_at":"2022-03-07T17:37:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.0/manifests"},{"name":"v0.40.1","sha":"b2ab4671b915d50b523ae77b85e9554e5f8bcf95","kind":"commit","published_at":"2022-03-03T22:13:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.40.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.40.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.40.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.1/manifests"},{"name":"v0.40.0","sha":"1e75cb0418df15f8bc8193b1b8a3b3a8d81cb3b0","kind":"commit","published_at":"2022-03-02T15:09:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.40.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.40.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.40.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.0/manifests"},{"name":"v0.39.3","sha":"1d1a7de31457b0f2974090101cb793ee78eeb9b7","kind":"commit","published_at":"2022-02-26T12:30:38.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.3/manifests"},{"name":"v0.39.2","sha":"24cd39089a82abae50195ab9ea3f7be0ef6a2d51","kind":"commit","published_at":"2022-02-26T01:07:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.2/manifests"},{"name":"v0.39.1","sha":"c89131bcf3851505c2ff5f7ca3ae66b1b6a725d4","kind":"commit","published_at":"2022-02-25T16:32:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.1/manifests"},{"name":"v0.39.0","sha":"6c306efed2811c0c78b599355c82f937fe7a251d","kind":"commit","published_at":"2022-02-24T16:15:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.0/manifests"},{"name":"v0.38.0","sha":"52d2e62cdcc08967ead746820346766e12698488","kind":"commit","published_at":"2022-02-15T17:51:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.38.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.38.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.38.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.38.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.38.0/manifests"},{"name":"v0.37.10","sha":"0ed284212305c76d65687aad6eaabf91142e0ddc","kind":"commit","published_at":"2022-02-07T23:47:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.10","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.10/manifests"},{"name":"v0.37.9","sha":"b78c90d0186c959629722d30fb1ca7c6d27faadb","kind":"commit","published_at":"2022-02-07T22:50:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.9","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.9/manifests"},{"name":"v0.37.8","sha":"2c62651c8279f288d9668039da4a865e9a5d0b2a","kind":"commit","published_at":"2022-02-07T21:55:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.8","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.8/manifests"},{"name":"v0.37.7","sha":"5519a25035e6c6ad46bb4c37ef4e174d1060a257","kind":"commit","published_at":"2022-02-07T17:03:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.7","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.7/manifests"},{"name":"v0.37.6","sha":"950ad681a03a5f6924388f92edcf638b87576992","kind":"commit","published_at":"2022-02-07T15:55:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.6/manifests"},{"name":"v0.37.5","sha":"e474b2f23c1e42d274af511333e0d06b879b169d","kind":"commit","published_at":"2022-02-05T15:23:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.5/manifests"},{"name":"v0.37.4","sha":"e7bef5e511c94940c46bba9a4193dacc7c9e97c5","kind":"commit","published_at":"2022-02-04T21:49:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.4/manifests"},{"name":"v0.37.3","sha":"e4ac7700dd76b9cf30778ef40e9acfd3168dcaeb","kind":"commit","published_at":"2022-02-04T19:44:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.3/manifests"},{"name":"v0.37.2","sha":"d3469801fc1e3eae117049064f751689c64bc8bc","kind":"commit","published_at":"2022-02-04T19:04:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.2/manifests"},{"name":"v0.37.1","sha":"3f50bb8fa74436f36202b2582f02be7f91644ab5","kind":"commit","published_at":"2022-02-04T18:23:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.1/manifests"},{"name":"v0.37.0","sha":"341288ba29d66d36afe80f2a7d8eb9b1e53d0a5a","kind":"commit","published_at":"2022-02-04T17:41:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.0/manifests"},{"name":"v0.36.0","sha":"aebe843c6f0307d5c263c25257caf3e6ea827c78","kind":"commit","published_at":"2022-01-19T16:43:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.36.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.36.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.36.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.36.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.36.0/manifests"},{"name":"v0.35.1","sha":"b77ddfc29c2d93dbc61c25b8f0e726c0e238f43b","kind":"commit","published_at":"2022-01-10T18:40:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.35.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.35.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.35.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.1/manifests"},{"name":"v0.35.0","sha":"5e5312c72ddd4b3d4d6200a5e74e78a6d76aa0c7","kind":"commit","published_at":"2022-01-06T22:52:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.35.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.35.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.35.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.0/manifests"},{"name":"v0.34.0","sha":"7f8cb0bd8068709982ef23e931e1ceaa2dfac955","kind":"commit","published_at":"2021-12-22T20:55:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.34.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.34.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.34.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.34.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.34.0/manifests"},{"name":"v0.33.0","sha":"a27907659d6c43f5bef2f76a9e381f2bf697a64f","kind":"commit","published_at":"2021-12-16T13:55:53.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.33.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.33.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.33.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.33.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.33.0/manifests"},{"name":"v0.32.2","sha":"727b84ce0da67a35899e966eb4408b3e6553ed63","kind":"commit","published_at":"2021-12-14T17:17:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.32.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.2/manifests"},{"name":"v0.32.1","sha":"d3804d1a827c9b1fa9867208de1167a9e62c6e99","kind":"commit","published_at":"2021-12-14T01:49:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.32.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.1/manifests"},{"name":"v0.32.0","sha":"da0b17b719b6d5cabe0819d44f90755c73312de8","kind":"commit","published_at":"2021-12-08T21:25:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.32.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.0/manifests"},{"name":"v0.31.0","sha":"22c4b275e73d70807fca8017d4896d8398b3373f","kind":"commit","published_at":"2021-12-03T16:12:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.31.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.31.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.31.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.31.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.31.0/manifests"},{"name":"v0.30.1","sha":"45ea4177e8a37a56798bacf89c4b6cdd5d056d6e","kind":"commit","published_at":"2021-11-15T19:41:46.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.30.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.30.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.30.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.30.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.30.1/manifests"},{"name":"v0.29.0","sha":"a2882ee810edcbf4db3230e982c316b261eb17cd","kind":"commit","published_at":"2021-10-29T16:00:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.29.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.29.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.29.0/manifests"},{"name":"v0.28.0","sha":"3286a4d4cc88e02e81db4f07d21a9fc6edac2a01","kind":"commit","published_at":"2021-10-28T19:41:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.28.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.28.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.28.0/manifests"},{"name":"v0.27.0","sha":"89242e6ed32528132ac79635a856b7a04a77014f","kind":"commit","published_at":"2021-10-21T18:34:17.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.27.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.27.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.27.0/manifests"},{"name":"v0.26.0","sha":"7a005fec0698a405a618242557e03ceebe1ee650","kind":"commit","published_at":"2021-10-15T17:26:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.26.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.26.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.26.0/manifests"},{"name":"v0.25.0","sha":"b25f5b664b21837aee9130d2e63812431bc64a40","kind":"commit","published_at":"2021-10-07T19:18:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.25.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.25.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.25.0/manifests"},{"name":"v0.24.1","sha":"0395c4744581a3d33bf80656f092b19dd75b32fb","kind":"commit","published_at":"2021-09-27T22:31:59.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.24.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.24.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.24.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.1/manifests"},{"name":"v0.24.0","sha":"6d4d083acccc68455e09dd45a474b3f6b5215006","kind":"commit","published_at":"2021-09-23T00:55:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.24.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.24.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.0/manifests"},{"name":"v0.23.0","sha":"ddfc8e20c0f370d25e7d032b23bef2e3d519506c","kind":"commit","published_at":"2021-09-13T17:06:23.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.23.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.23.0/manifests"},{"name":"v0.22.0","sha":"06dcd3261dadf77ec0d86e7a981eb4aac7008d09","kind":"commit","published_at":"2021-09-03T21:29:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.22.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.22.0/manifests"},{"name":"v0.21.0","sha":"ff828fbac211e1d9e993c309461bd9e0636fc2ec","kind":"commit","published_at":"2021-08-20T17:50:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.21.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.21.0/manifests"},{"name":"v0.20.0","sha":"b0e9b92a257f920bf6b31438a1dba6762fa7390d","kind":"commit","published_at":"2021-08-18T15:00:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.20.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.20.0/manifests"},{"name":"v0.19.1","sha":"fee35dd1753308fc887da744de5d0c66947c7493","kind":"commit","published_at":"2021-06-30T17:10:00.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.19.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.1/manifests"},{"name":"v0.19.0","sha":"2de56c074917b159fdd76fc6b1da974b4c53ca2e","kind":"commit","published_at":"2021-06-29T22:16:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.19.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.0/manifests"},{"name":"v0.18.0","sha":"962e82297c329f728018335858ad619ef3e00648","kind":"commit","published_at":"2021-06-29T18:28:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.18.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.18.0/manifests"},{"name":"v0.17.1","sha":"6dd698d89edee65fdcb7c0b2630b6253ed34deba","kind":"commit","published_at":"2021-06-19T18:32:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.17.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.17.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.17.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.1/manifests"},{"name":"v0.17.0","sha":"801e662633304256a05988c868234a2d0ed5a1ae","kind":"commit","published_at":"2021-06-04T16:50:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.17.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.0/manifests"},{"name":"v0.16.1","sha":"8be0d988e7e793d62afd2e9e2a881428322329cb","kind":"commit","published_at":"2021-05-25T21:13:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.16.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.1/manifests"},{"name":"v0.16.0","sha":"80e23bdb506835cdfe26780abcfd977363bae015","kind":"commit","published_at":"2021-05-25T19:01:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.16.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.0/manifests"},{"name":"v0.15.2","sha":"baa859d2ed084eb7c3d5621a255ad6f277533276","kind":"commit","published_at":"2021-05-12T21:28:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.2/manifests"},{"name":"v0.15.1","sha":"032cecbe7f19ca6f6f07d80f8dc902530e4c7502","kind":"commit","published_at":"2021-04-22T20:38:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"1632fdd85ebe8692328ce82b8ac3a3849dbdc315","kind":"commit","published_at":"2021-04-22T19:56:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.0/manifests"},{"name":"v0.14.0","sha":"26a4dd36a8932c7867fcdd6296f50643be30f8a6","kind":"commit","published_at":"2021-03-20T16:23:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.14.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.14.0/manifests"},{"name":"v0.13.1","sha":"40e9c4b146b2cf52112619969f18453ce7fa3234","kind":"commit","published_at":"2021-02-26T20:59:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.13.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.13.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.1/manifests"},{"name":"v0.13.0","sha":"6d5ff0fd8e7c39c95d30c960c8ae6e95b91cd9d0","kind":"commit","published_at":"2021-02-25T18:47:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.13.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.0/manifests"},{"name":"v0.12.7","sha":"c5e3b631ac354a6b22d912c6ed8972a433b02eae","kind":"commit","published_at":"2021-02-17T13:14:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.7","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.7/manifests"},{"name":"v0.12.6","sha":"8d838b18a85d2c2f0ee976cf2af491913dbcf98b","kind":"commit","published_at":"2021-02-05T16:26:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.6/manifests"},{"name":"v0.12.5","sha":"b22fd987db989debd8e880e7dfe934d39fd016f3","kind":"commit","published_at":"2021-02-01T17:03:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.5/manifests"},{"name":"v0.12.4","sha":"407769e88cdb5232b72aa573d9643e6624b92743","kind":"commit","published_at":"2021-01-27T16:51:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.4/manifests"},{"name":"v0.12.3","sha":"7bcdafe745a58592552393f8cb32f2d58982aa21","kind":"commit","published_at":"2021-01-22T21:10:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.3/manifests"},{"name":"v0.12.2","sha":"0f6288881bf8db287e07576bf8dd067184745759","kind":"commit","published_at":"2021-01-06T02:32:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.2/manifests"},{"name":"v0.12.1","sha":"bb70b0b43ee794c97266cc352a37804f2068acd2","kind":"commit","published_at":"2021-01-05T00:45:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"37b96a241b043f09f6cfee145c19b425e858f939","kind":"commit","published_at":"2021-01-04T21:50:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.0/manifests"},{"name":"v0.11.1","sha":"e299a5355fffa8a200f7076befeaf4a494d495f7","kind":"commit","published_at":"2020-12-23T18:23:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.11.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.1/manifests"},{"name":"v0.11.0","sha":"6aaf9ee712f41c38eefe17a07a1aa43cac9e7990","kind":"commit","published_at":"2020-12-18T21:59:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.11.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"52bac6e2fd1adb3d8852f0fab6536a81ec037b89","kind":"commit","published_at":"2020-12-10T03:20:53.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.10.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.10.0/manifests"},{"name":"v0.9.2","sha":"f87c59b4eb5d5b1396dcc8ad06a07a0706c4b7c5","kind":"commit","published_at":"2020-12-03T21:32:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.9.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.2/manifests"},{"name":"v0.9.1","sha":"6f9ded60ed144de3e837effdee5d96366441e7d3","kind":"commit","published_at":"2020-12-02T12:50:31.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.1/manifests"},{"name":"v0.9.0","sha":"ae71b8832d16b70b0373a518877d169659f07bd9","kind":"commit","published_at":"2020-11-30T16:37:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"71939557e6164712accfd0f7486ef4a6c8459656","kind":"commit","published_at":"2020-11-17T18:21:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.8.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.8.0/manifests"},{"name":"v0.7.1","sha":"dad1d9691c355c643eb3a7f1be1cadde36d913c7","kind":"commit","published_at":"2020-11-12T14:36:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.7.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"9581a0309b570d38037962598d4c30c8d028aaa2","kind":"commit","published_at":"2020-11-11T20:15:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.7.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"b3098f3423d11fe10ea18138177258f6d837d379","kind":"commit","published_at":"2020-11-09T19:18:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.6.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"ecfc471ce51a2a84ec144263592c223816241c7a","kind":"commit","published_at":"2020-11-04T20:47:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.5.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"773581704c736925a7a5485c18bde3f8129f1238","kind":"commit","published_at":"2020-10-30T19:14:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.5.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"f19cb03aa07891e433b5e2e6faa956bc9de83bcf","kind":"commit","published_at":"2020-10-26T15:19:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.4.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"15e2e32103b9aaf6d816fa2c6d9b9dc94ba8c16b","kind":"commit","published_at":"2020-10-23T15:06:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.4.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"1bf1e643ebb49fac1f2f30c1a13ff8b056dec938","kind":"commit","published_at":"2020-10-15T18:41:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.3.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.3.0/manifests"},{"name":"v0.2.0","sha":"956af57d3b8e23d5c607f486b0b65a760a602aad","kind":"commit","published_at":"2020-10-08T18:37:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.2.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"5adfce19e0abdfb0d2c62c80713b90f681c83bf4","kind":"commit","published_at":"2020-09-29T20:33:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0/manifests"},{"name":"v0.1.0-beta.5","sha":"8b81c87d18da91d2a5c8f10fdfb93ec3e05aa1f6","kind":"commit","published_at":"2020-09-26T02:59:19.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.5/manifests"},{"name":"v0.1.0-beta.4","sha":"676544b6ab7a5b70af7c2d3d2d34b23c50996900","kind":"commit","published_at":"2020-08-10T22:28:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.4/manifests"},{"name":"v0.1.0-beta.3","sha":"2d452bf59e0f44de6051ac3f316c8afafe0a929a","kind":"commit","published_at":"2020-08-10T14:33:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.3/manifests"},{"name":"v0.1.0-beta.2","sha":"06f8355fce7901bf88493323831b235ef068dc4a","kind":"commit","published_at":"2020-07-27T19:13:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.2/manifests"},{"name":"v0.1.0-beta.1","sha":"19eadde9ca03c89f7325b8ff09ba8114abbe4dcf","kind":"commit","published_at":"2020-07-27T13:55:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.1/manifests"}]},"repo_metadata_updated_at":"2026-08-07T23:36:14.402Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":3.4910977008627997,"forks_count":4.159393546456536,"docker_downloads_count":null,"average":1.9126228118298338},"purl":"pkg:apk/alpine/syft-fish-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.18","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-fish-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-fish-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-fish-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-22T11:00:46.375Z","issues_count":731,"pull_requests_count":2255,"avg_time_to_close_issue":13448535.886297377,"avg_time_to_close_pull_request":877371.7434279706,"issues_closed_count":343,"pull_requests_closed_count":1902,"pull_request_authors_count":150,"issue_authors_count":381,"avg_comments_per_issue":2.1299589603283176,"avg_comments_per_pull_request":0.5197339246119734,"merged_pull_requests_count":1710,"bot_issues_count":11,"bot_pull_requests_count":1193,"past_year_issues_count":194,"past_year_pull_requests_count":931,"past_year_avg_time_to_close_issue":1820259.3389830508,"past_year_avg_time_to_close_pull_request":292805.3951612903,"past_year_issues_closed_count":59,"past_year_pull_requests_closed_count":744,"past_year_pull_request_authors_count":63,"past_year_issue_authors_count":127,"past_year_avg_comments_per_issue":0.9536082474226805,"past_year_avg_comments_per_pull_request":0.32438238453276047,"past_year_bot_issues_count":7,"past_year_bot_pull_requests_count":593,"past_year_merged_pull_requests_count":666,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft-fish-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft-fish-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft-fish-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft-fish-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft-fish-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft-fish-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":316,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2023-05-23T09:59:33.575Z","updated_at":"2023-05-23T09:59:33.575Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.18","url":"https://pkgs.alpinelinux.org/packages?branch=v3.18","ecosystem":"alpine","default":false,"packages_count":20068,"maintainers_count":367,"namespaces_count":2,"keywords_count":3640,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1213},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-05-22T10:43:30.622Z","updated_at":"2026-08-10T05:08:36.172Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/namespaces"}},{"id":5746847,"name":"syft","ecosystem":"homebrew","description":"CLI for generating a Software Bill of Materials from container images","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":null,"versions_count":103,"first_release_published_at":"2022-12-26T06:28:06.214Z","latest_release_published_at":"2026-08-07T22:14:13.337Z","latest_release_number":"1.50.0","last_synced_at":"2026-08-07T22:14:13.592Z","created_at":"2022-12-26T06:28:06.067Z","updated_at":"2026-08-07T22:14:13.593Z","registry_url":"https://formulae.brew.sh/formula/syft","install_command":"brew install syft","documentation_url":null,"metadata":{},"repo_metadata":{"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2024-01-04T21:07:04.000Z","size":17926,"stargazers_count":5044,"open_issues_count":303,"forks_count":464,"subscribers_count":56,"default_branch":"main","last_synced_at":"2024-01-05T12:28:22.352Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2024-01-05T06:28:08.000Z","dependencies_parsed_at":"2023-12-20T09:43:51.606Z","dependency_job_id":"3d1fd421-c43b-4d60-87a0-71ec0266d70f","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":1260,"total_committers":102,"mean_commits":"12.352941176470589","dds":0.7976190476190477,"last_synced_commit":"c038f13d44ef3c646509d189bdbae31e91a77ea0"},"previous_names":["anchore/imgbom"],"tags_count":180,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":179319987,"owners_count":10799935,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"anchore","name":"Anchore, Inc.","uuid":"16208487","kind":"organization","description":"","email":"info@anchore.com","website":"https://anchore.com/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16208487?v=4","repositories_count":43,"last_synced_at":"2023-03-02T09:35:13.089Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/anchore","created_at":"2022-11-13T02:25:02.273Z","updated_at":"2023-03-02T09:35:13.093Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore/repositories"},"tags":[{"name":"v0.99.0","sha":"3cffa0b7fd276a35123c48e45407c4f402f2c58f","kind":"tag","published_at":"2023-12-21T16:18:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.99.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.99.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.99.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.99.0/manifests"},{"name":"v0.98.0","sha":"5c8dd4c3a7632dcfd999bab7a5b73c3180f1b628","kind":"tag","published_at":"2023-11-29T14:52:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.98.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.98.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.98.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.98.0/manifests"},{"name":"v0.97.1","sha":"7cfb5f630a7a2105d49d65eaaaa2e2c06e4eda73","kind":"tag","published_at":"2023-11-17T21:03:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.97.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.97.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.1/manifests"},{"name":"v0.97.0","sha":"1c787f436fca20cbec4541f978ed2a634b880c97","kind":"tag","published_at":"2023-11-16T22:56:21.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.97.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.97.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.0/manifests"},{"name":"v0.96.0","sha":"0891d35e0774f175e3a3f170edcce9ad2f4f015b","kind":"tag","published_at":"2023-11-09T14:04:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.96.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.96.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.96.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.96.0/manifests"},{"name":"v0.95.0","sha":"9b98785aab9346999a0b5e9f5e4b4e63a1b1916c","kind":"tag","published_at":"2023-11-07T16:43:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.95.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.95.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.95.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.95.0/manifests"},{"name":"v0.94.0","sha":"8f6bdde6662aa8050a71eadbdb7bd5a3b079a56d","kind":"tag","published_at":"2023-10-20T17:21:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.94.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.94.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.94.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.94.0/manifests"},{"name":"v0.93.0","sha":"0748945c8341a06415ac80e624b84e8d3f548d39","kind":"tag","published_at":"2023-10-10T17:27:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.93.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.93.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.93.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.93.0/manifests"},{"name":"v0.92.0","sha":"8f57d22f639e132cbd87324abacd864232c611ce","kind":"tag","published_at":"2023-09-27T15:40:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.92.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.92.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.92.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.92.0/manifests"},{"name":"v0.91.0","sha":"b7fa75d7f82a6816d307805ac07e6965c799e938","kind":"tag","published_at":"2023-09-20T19:41:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.91.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.91.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.91.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.91.0/manifests"},{"name":"v0.90.0","sha":"b82c0ffc3417bdc8c38f4633af95a668ec29fa35","kind":"commit","published_at":"2023-09-11T16:12:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.90.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.90.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.90.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.90.0/manifests"},{"name":"v0.89.0","sha":"b454160549bbd199e0a5693750856f30b41767f7","kind":"commit","published_at":"2023-08-31T14:50:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.89.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.89.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.89.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.89.0/manifests"},{"name":"v0.88.0","sha":"dd09e0362e46bee7285e0fca5ed96e398c314380","kind":"commit","published_at":"2023-08-25T20:45:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.88.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.88.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.88.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.88.0/manifests"},{"name":"v0.87.1","sha":"4762ba0943785fe778276893388e839e01787b45","kind":"commit","published_at":"2023-08-17T16:55:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.87.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.87.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.1/manifests"},{"name":"v0.87.0","sha":"b3d7ba569b64376cf33df717e3bc40d8375e033b","kind":"commit","published_at":"2023-08-14T15:37:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.87.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.87.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.0/manifests"},{"name":"v0.86.1","sha":"e2f7befbfbf88053dfb2007c6499a4bb2d232c3c","kind":"commit","published_at":"2023-07-31T17:29:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.86.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.86.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.1/manifests"},{"name":"v0.86.0","sha":"f14742b3f3a6f8cd4bc696dbafee53ab1d665da7","kind":"commit","published_at":"2023-07-31T16:02:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.86.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.86.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.0/manifests"},{"name":"v0.85.0","sha":"4fc17edd146af34ab06f5b0443ef8ddac3aaf076","kind":"commit","published_at":"2023-07-12T17:14:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.85.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.85.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.85.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.85.0/manifests"},{"name":"v0.84.1","sha":"791d1f955215f1dad383c9835e4d3c01267dc0f5","kind":"commit","published_at":"2023-06-28T16:05:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.84.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.84.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.1/manifests"},{"name":"v0.84.0","sha":"5d54e6e847192f63db80c9a7ee23197476c632ce","kind":"commit","published_at":"2023-06-20T16:08:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.84.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.84.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.0/manifests"},{"name":"v0.83.1","sha":"a1bba36d514c3ff0f34635b9cdc9f07a92ea793b","kind":"commit","published_at":"2023-06-14T15:45:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.83.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.83.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.1/manifests"},{"name":"v0.83.0","sha":"1764e1c3f6bd66781f8350d957a1f95e4d9ad3de","kind":"commit","published_at":"2023-06-05T19:04:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.83.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.83.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.0/manifests"},{"name":"v0.82.0","sha":"4ac8fdf6df0da4cd6f76820dbec9f490ee56bcba","kind":"commit","published_at":"2023-05-23T16:58:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.82.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.82.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.82.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.82.0/manifests"},{"name":"v0.81.0","sha":"334a775cb9cd6bf50033de1bb3aa04f46b669f5d","kind":"commit","published_at":"2023-05-19T14:21:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.81.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.81.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.81.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.81.0/manifests"},{"name":"v0.80.0","sha":"0f1aed447751f92dcc0165b56aa474ec9706805e","kind":"commit","published_at":"2023-05-05T15:41:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.80.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.80.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.80.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.80.0/manifests"},{"name":"v0.79.0","sha":"b2b332e8b2b66af0905e98b54ebd713a922be1a8","kind":"commit","published_at":"2023-04-21T13:34:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.79.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.79.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.79.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.79.0/manifests"},{"name":"v0.78.0","sha":"244b797a199458f504758c0e3a775572a021e629","kind":"commit","published_at":"2023-04-17T16:26:07.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.78.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.78.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.78.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.78.0/manifests"},{"name":"v0.77.0","sha":"dd30c99bc2439cb91e3d084eb21e1040dd5a54dc","kind":"commit","published_at":"2023-04-11T14:13:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.77.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.77.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.77.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.77.0/manifests"},{"name":"v0.76.1","sha":"7845381331e873f65fd5013f44b7d85168ced5f5","kind":"commit","published_at":"2023-04-05T17:59:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.76.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.76.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.1/manifests"},{"name":"v0.76.0","sha":"dfcc07e5122217ca9e2fc75817c593356fc0c405","kind":"commit","published_at":"2023-03-31T14:04:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.76.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.76.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.0/manifests"},{"name":"v0.75.0","sha":"cc0a376aba43e7f9c5fe66320643f72088533838","kind":"commit","published_at":"2023-03-13T17:26:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.75.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.75.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.75.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.75.0/manifests"},{"name":"v0.74.1","sha":"41cbbe09b205e3b80e8a57d4f7a509b5f938557d","kind":"commit","published_at":"2023-03-07T17:54:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.74.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.74.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.1/manifests"},{"name":"v0.74.0","sha":"5f90d0371873faf5eb8f2e748909b32294be6263","kind":"commit","published_at":"2023-03-01T20:35:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.74.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.74.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.0/manifests"},{"name":"v0.72.1","sha":"be71f7c6aea3fd663e0f059df1d8060c2f6e916d","kind":"commit","published_at":"2023-02-22T21:34:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.72.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.72.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.1/manifests"},{"name":"v0.73.0","sha":"aa151da5fe2a1b11502c852fd2d3ad462c1d245f","kind":"commit","published_at":"2023-02-22T19:08:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.73.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.73.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.73.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.73.0/manifests"},{"name":"v0.72.0","sha":"2642a3616170ccbda9d8c8cb4f4a6b0fd5c63da9","kind":"commit","published_at":"2023-02-16T15:22:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.72.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.72.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.0/manifests"},{"name":"v0.71.0","sha":"88c81d33edc67b0b9636d0046417a9373ac8b74f","kind":"commit","published_at":"2023-02-09T16:35:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.71.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.71.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.71.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.71.0/manifests"},{"name":"v0.70.0","sha":"9995950c70e849f9921919faffbfcf46401f71f3","kind":"commit","published_at":"2023-02-03T18:06:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.70.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.70.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.70.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.70.0/manifests"},{"name":"v0.69.1","sha":"1530ef354ffaf59cef6a02c949f2cdb82353954f","kind":"commit","published_at":"2023-01-31T16:53:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.69.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.69.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.1/manifests"},{"name":"v0.69.0","sha":"b81c9805dcc9bf25dad7659fd9c2bbf7dd3f3d90","kind":"commit","published_at":"2023-01-30T18:47:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.69.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.69.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.0/manifests"},{"name":"v0.68.1","sha":"4c0aef09b8d7fb78200b04416f474b90b79370de","kind":"commit","published_at":"2023-01-25T17:18:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.68.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.68.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.1/manifests"},{"name":"v0.68.0","sha":"e58050bac045be672621047d5699b88884e2da62","kind":"commit","published_at":"2023-01-20T14:49:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.68.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.68.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.0/manifests"},{"name":"v0.66.2","sha":"03971ace43b877e371c13e3f786c1f6c3a4ec507","kind":"commit","published_at":"2023-01-17T21:26:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.2/manifests"},{"name":"v0.66.1","sha":"ac94bf530c7b1e6ee5df1ed0f9f6454fca8bc918","kind":"commit","published_at":"2023-01-12T22:42:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.1/manifests"},{"name":"v0.66.0","sha":"260cb4c72d001b63e7462ed214caeb0aab605714","kind":"commit","published_at":"2023-01-12T20:03:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.0/manifests"},{"name":"v0.65.0","sha":"bc1edb9c8a2fb4824bfdcac6147edc2bbf47aaf6","kind":"commit","published_at":"2023-01-04T16:34:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.65.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.65.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.65.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.65.0/manifests"},{"name":"v0.64.0","sha":"e1e489a2849c8432781a7cb58b257fa935efa1cf","kind":"commit","published_at":"2022-12-23T13:37:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.64.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.64.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.64.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.64.0/manifests"},{"name":"v0.63.0","sha":"23a3173c9f2461e5906d1b9e3ac20b4806d74777","kind":"commit","published_at":"2022-12-12T17:55:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.63.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.63.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.63.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.63.0/manifests"},{"name":"v0.62.3","sha":"247b054ab56f848c477495218754166272f470b5","kind":"commit","published_at":"2022-11-30T16:11:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.3/manifests"},{"name":"v0.62.2","sha":"0cbd0cc70377d5b1b11b808fbbf9ddec450c68ee","kind":"commit","published_at":"2022-11-28T15:43:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.2/manifests"},{"name":"v0.62.1","sha":"098e61dcc81d7a6d666bc62a2166c9b8f32c61bc","kind":"commit","published_at":"2022-11-21T14:26:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.1/manifests"},{"name":"v0.62.0","sha":"da4b2df57640e03f273a2e7e9b04eca40555e139","kind":"commit","published_at":"2022-11-18T18:42:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.0/manifests"},{"name":"v0.61.0","sha":"67888ee855ad37948bfee98e3aa7d592b4f91e95","kind":"commit","published_at":"2022-11-18T14:45:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.61.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.61.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.61.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.61.0/manifests"},{"name":"v0.60.3","sha":"bc9740d50a38e9660f2f98ed91d84c6d8799cf70","kind":"commit","published_at":"2022-11-03T14:38:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.3/manifests"},{"name":"v0.60.2","sha":"35f0f2931e310882fe7117c41d57a185d72ca498","kind":"commit","published_at":"2022-11-02T14:05:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.2/manifests"},{"name":"v0.60.1","sha":"ba57f3db5189c632ecaa02f9cf0b634c5a55099c","kind":"commit","published_at":"2022-11-01T16:28:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.1/manifests"},{"name":"v0.60.0","sha":"4c5c6f6319d931f324c3a15a88ba2593109cbbe2","kind":"commit","published_at":"2022-11-01T14:30:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.0/manifests"},{"name":"v0.59.0","sha":"41bc6bb410352845f22766e27dd48ba93aa825a4","kind":"commit","published_at":"2022-10-14T19:54:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.59.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.59.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.59.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.59.0/manifests"},{"name":"v0.58.0","sha":"b9b13d5525df89194d332467f692bc28bc68d07f","kind":"commit","published_at":"2022-09-29T18:45:59.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.58.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.58.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.58.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.58.0/manifests"},{"name":"v0.57.0","sha":"04d288b3643f906255af88108f27712bb2be5b63","kind":"commit","published_at":"2022-09-19T20:08:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.57.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.57.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.57.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.57.0/manifests"},{"name":"v0.56.0","sha":"c5dca001e267d2a91ff82e53ca72535ceef6af02","kind":"commit","published_at":"2022-09-09T18:59:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.56.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.56.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.56.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.56.0/manifests"},{"name":"v0.55.0","sha":"a7966a4d9d8155be788af33fe5e5af2e40043f82","kind":"commit","published_at":"2022-08-29T19:28:19.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.55.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.55.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.55.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.55.0/manifests"},{"name":"v0.54.0","sha":"21eb77206020c04c9ca5316562e32179c73926a9","kind":"commit","published_at":"2022-08-16T18:14:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.54.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.54.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.54.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.54.0/manifests"},{"name":"v0.53.4","sha":"69bde44c6e50a5838cdd2c2c821edb0111013178","kind":"commit","published_at":"2022-08-03T16:24:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.4/manifests"},{"name":"v0.53.3","sha":"042304ee4c614708b4e293f525c5d0a435ede2cf","kind":"commit","published_at":"2022-08-03T13:46:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.3/manifests"},{"name":"v0.53.2","sha":"69fb0a6f3bd6f0281e0d466ab7db23090a3ebc65","kind":"commit","published_at":"2022-08-02T19:25:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.2/manifests"},{"name":"v0.53.1","sha":"f5d02d4e527d3fe1906fd209ce036f58049979f3","kind":"commit","published_at":"2022-08-02T15:44:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.1/manifests"},{"name":"v0.53.0","sha":"b7f587f5dcae631b76d2f80ed2a3b9a207972d80","kind":"commit","published_at":"2022-08-02T13:42:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.0/manifests"},{"name":"v0.52.0","sha":"ba9adb17ebb510a2a3bd2b641738b1d9235e1f3e","kind":"commit","published_at":"2022-07-21T13:17:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.52.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.52.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.52.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.52.0/manifests"},{"name":"v0.51.0","sha":"470b13045bbbf150f3c79d1487a01ae6acc5592d","kind":"commit","published_at":"2022-07-11T14:09:08.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.51.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.51.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.51.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.51.0/manifests"},{"name":"v0.50.0","sha":"69134ed3b54bc8b1d86d868611f7d069ce3290a8","kind":"commit","published_at":"2022-07-05T15:57:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.50.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.50.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.50.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.50.0/manifests"},{"name":"v0.49.0","sha":"d5e12ff89c2d3af684152dd401618533a6f1b67e","kind":"commit","published_at":"2022-06-24T15:05:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.49.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.49.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.49.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.49.0/manifests"},{"name":"v0.48.1","sha":"03e37044d437294b0aac44a4e9277eb8f6c8be3f","kind":"commit","published_at":"2022-06-16T18:56:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.48.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.48.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.1/manifests"},{"name":"v0.48.0","sha":"9e72771b851f1657ade0c2214569f675cf0813f3","kind":"commit","published_at":"2022-06-16T14:43:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.48.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.48.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.0/manifests"},{"name":"v0.47.0","sha":"f15d4a9984428103a60e2298d0755b3adcc32a3a","kind":"commit","published_at":"2022-06-08T21:39:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.47.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.47.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.47.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.47.0/manifests"},{"name":"v0.46.3","sha":"7cb8e1fc14a278ec5afce379623a47577aba9917","kind":"commit","published_at":"2022-05-25T21:40:08.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.3/manifests"},{"name":"v0.46.2","sha":"d41afe05eb8fecd2906f5db9661910dbc99fc3dd","kind":"commit","published_at":"2022-05-19T20:10:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.2/manifests"},{"name":"v0.46.1","sha":"03ee4fdf5e87907c5a49ae353c44682894bb411c","kind":"commit","published_at":"2022-05-12T16:56:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.1/manifests"},{"name":"v0.46.0","sha":"91e2fd8532254216a83c80891611751d0c8fba7b","kind":"commit","published_at":"2022-05-11T22:35:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.0/manifests"},{"name":"v0.45.1","sha":"37927b8b23cac234289a73aa3e886675d463e477","kind":"commit","published_at":"2022-05-03T13:38:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.45.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.45.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.1/manifests"},{"name":"v0.45.0","sha":"36973021fad57baf443ffa88181394b87ce109a0","kind":"commit","published_at":"2022-04-29T15:18:45.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.45.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.45.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.0/manifests"},{"name":"v0.44.1","sha":"248023baafdf2a74f8bdaf98beaee3f40584bb7d","kind":"commit","published_at":"2022-04-15T17:00:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.44.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.44.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.1/manifests"},{"name":"v0.44.0","sha":"b46d044d7e3afc2ee09fd5ff26635f783628126e","kind":"commit","published_at":"2022-04-11T18:56:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.44.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.44.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.0/manifests"},{"name":"v0.43.2","sha":"e415bb21e7a609c12dc37a2d6395796fb675e3fe","kind":"commit","published_at":"2022-04-06T21:15:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.2/manifests"},{"name":"v0.43.1","sha":"748cfbf00647df3366ec3c4ad89d87762625da5a","kind":"commit","published_at":"2022-04-06T16:27:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.1/manifests"},{"name":"v0.43.0","sha":"f24bbc1838351e4e408368f3312c76db6552e71e","kind":"commit","published_at":"2022-03-31T19:45:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.0/manifests"},{"name":"v0.42.4","sha":"a7db43f5ec159cad98d0298a2375ee1f4c397894","kind":"commit","published_at":"2022-03-24T14:11:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.4/manifests"},{"name":"v0.42.3","sha":"cc2c0e57a0d02a1719b4e34d0793f09e9699c8b0","kind":"commit","published_at":"2022-03-23T18:34:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.3/manifests"},{"name":"v0.42.2","sha":"c0b547bdb239f00ef43b7f69a61813b710d0b221","kind":"commit","published_at":"2022-03-22T17:19:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.2/manifests"},{"name":"v0.42.1","sha":"283db88dc4d40502219c80af36d073b2f1556007","kind":"commit","published_at":"2022-03-21T18:59:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.1/manifests"},{"name":"v0.42.0","sha":"f4734d28b391800f824a89712897daf19237812c","kind":"commit","published_at":"2022-03-17T14:22:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.0/manifests"},{"name":"v0.41.6","sha":"ee0a1d172c0c6f0da907694b9b48870b33d2852d","kind":"commit","published_at":"2022-03-16T13:10:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.6/manifests"},{"name":"v0.41.5","sha":"b9b3ccecf9438f35977f8e8c6187bd616630640b","kind":"commit","published_at":"2022-03-15T17:02:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.5/manifests"},{"name":"v0.41.4","sha":"c7cf8b0b264562b463dd1f8d0ca7a6d1215ef41f","kind":"commit","published_at":"2022-03-11T18:17:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.4/manifests"},{"name":"v0.41.3","sha":"c7cf8b0b264562b463dd1f8d0ca7a6d1215ef41f","kind":"commit","published_at":"2022-03-11T18:17:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.3/manifests"},{"name":"v0.41.2","sha":"7789506dc65830c32f0bbc41e2be657f9fa473cd","kind":"commit","published_at":"2022-03-11T03:38:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.2/manifests"},{"name":"v0.41.1","sha":"07d3c9af52f241613971ccadd18c8f8ab67abc4e","kind":"commit","published_at":"2022-03-08T15:37:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.1/manifests"},{"name":"v0.41.0","sha":"5123f073c7e5b37a87287d5e9e4a01f4611b3eee","kind":"commit","published_at":"2022-03-07T17:37:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.0/manifests"},{"name":"v0.40.1","sha":"b2ab4671b915d50b523ae77b85e9554e5f8bcf95","kind":"commit","published_at":"2022-03-03T22:13:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.40.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.40.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.1/manifests"},{"name":"v0.40.0","sha":"1e75cb0418df15f8bc8193b1b8a3b3a8d81cb3b0","kind":"commit","published_at":"2022-03-02T15:09:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.40.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.40.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.0/manifests"},{"name":"v0.39.3","sha":"1d1a7de31457b0f2974090101cb793ee78eeb9b7","kind":"commit","published_at":"2022-02-26T12:30:38.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.3/manifests"},{"name":"v0.39.2","sha":"24cd39089a82abae50195ab9ea3f7be0ef6a2d51","kind":"commit","published_at":"2022-02-26T01:07:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.2/manifests"},{"name":"v0.39.1","sha":"c89131bcf3851505c2ff5f7ca3ae66b1b6a725d4","kind":"commit","published_at":"2022-02-25T16:32:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.1/manifests"},{"name":"v0.39.0","sha":"6c306efed2811c0c78b599355c82f937fe7a251d","kind":"commit","published_at":"2022-02-24T16:15:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.0/manifests"},{"name":"v0.38.0","sha":"52d2e62cdcc08967ead746820346766e12698488","kind":"commit","published_at":"2022-02-15T17:51:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.38.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.38.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.38.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.38.0/manifests"},{"name":"v0.37.10","sha":"0ed284212305c76d65687aad6eaabf91142e0ddc","kind":"commit","published_at":"2022-02-07T23:47:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.10","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.10","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.10/manifests"},{"name":"v0.37.9","sha":"b78c90d0186c959629722d30fb1ca7c6d27faadb","kind":"commit","published_at":"2022-02-07T22:50:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.9","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.9","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.9/manifests"},{"name":"v0.37.8","sha":"2c62651c8279f288d9668039da4a865e9a5d0b2a","kind":"commit","published_at":"2022-02-07T21:55:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.8","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.8/manifests"},{"name":"v0.37.7","sha":"5519a25035e6c6ad46bb4c37ef4e174d1060a257","kind":"commit","published_at":"2022-02-07T17:03:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.7","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.7/manifests"},{"name":"v0.37.6","sha":"950ad681a03a5f6924388f92edcf638b87576992","kind":"commit","published_at":"2022-02-07T15:55:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.6/manifests"},{"name":"v0.37.5","sha":"e474b2f23c1e42d274af511333e0d06b879b169d","kind":"commit","published_at":"2022-02-05T15:23:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.5/manifests"},{"name":"v0.37.4","sha":"e7bef5e511c94940c46bba9a4193dacc7c9e97c5","kind":"commit","published_at":"2022-02-04T21:49:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.4/manifests"},{"name":"v0.37.3","sha":"e4ac7700dd76b9cf30778ef40e9acfd3168dcaeb","kind":"commit","published_at":"2022-02-04T19:44:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.3/manifests"},{"name":"v0.37.2","sha":"d3469801fc1e3eae117049064f751689c64bc8bc","kind":"commit","published_at":"2022-02-04T19:04:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.2/manifests"},{"name":"v0.37.1","sha":"3f50bb8fa74436f36202b2582f02be7f91644ab5","kind":"commit","published_at":"2022-02-04T18:23:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.1/manifests"},{"name":"v0.37.0","sha":"341288ba29d66d36afe80f2a7d8eb9b1e53d0a5a","kind":"commit","published_at":"2022-02-04T17:41:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.0/manifests"},{"name":"v0.36.0","sha":"aebe843c6f0307d5c263c25257caf3e6ea827c78","kind":"commit","published_at":"2022-01-19T16:43:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.36.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.36.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.36.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.36.0/manifests"},{"name":"v0.35.1","sha":"b77ddfc29c2d93dbc61c25b8f0e726c0e238f43b","kind":"commit","published_at":"2022-01-10T18:40:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.35.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.35.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.1/manifests"},{"name":"v0.35.0","sha":"5e5312c72ddd4b3d4d6200a5e74e78a6d76aa0c7","kind":"commit","published_at":"2022-01-06T22:52:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.35.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.35.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.0/manifests"},{"name":"v0.34.0","sha":"7f8cb0bd8068709982ef23e931e1ceaa2dfac955","kind":"commit","published_at":"2021-12-22T20:55:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.34.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.34.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.34.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.34.0/manifests"},{"name":"v0.33.0","sha":"a27907659d6c43f5bef2f76a9e381f2bf697a64f","kind":"commit","published_at":"2021-12-16T13:55:53.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.33.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.33.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.33.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.33.0/manifests"},{"name":"v0.32.2","sha":"727b84ce0da67a35899e966eb4408b3e6553ed63","kind":"commit","published_at":"2021-12-14T17:17:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.2/manifests"},{"name":"v0.32.1","sha":"d3804d1a827c9b1fa9867208de1167a9e62c6e99","kind":"commit","published_at":"2021-12-14T01:49:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.1/manifests"},{"name":"v0.32.0","sha":"da0b17b719b6d5cabe0819d44f90755c73312de8","kind":"commit","published_at":"2021-12-08T21:25:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.0/manifests"},{"name":"v0.31.0","sha":"22c4b275e73d70807fca8017d4896d8398b3373f","kind":"commit","published_at":"2021-12-03T16:12:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.31.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.31.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.31.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.31.0/manifests"},{"name":"v0.30.1","sha":"45ea4177e8a37a56798bacf89c4b6cdd5d056d6e","kind":"commit","published_at":"2021-11-15T19:41:46.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.30.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.30.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.30.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.30.1/manifests"},{"name":"v0.29.0","sha":"a2882ee810edcbf4db3230e982c316b261eb17cd","kind":"commit","published_at":"2021-10-29T16:00:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.29.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.29.0/manifests"},{"name":"v0.28.0","sha":"3286a4d4cc88e02e81db4f07d21a9fc6edac2a01","kind":"commit","published_at":"2021-10-28T19:41:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.28.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.28.0/manifests"},{"name":"v0.27.0","sha":"89242e6ed32528132ac79635a856b7a04a77014f","kind":"commit","published_at":"2021-10-21T18:34:17.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.27.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.27.0/manifests"},{"name":"v0.26.0","sha":"7a005fec0698a405a618242557e03ceebe1ee650","kind":"commit","published_at":"2021-10-15T17:26:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.26.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.26.0/manifests"},{"name":"v0.25.0","sha":"b25f5b664b21837aee9130d2e63812431bc64a40","kind":"commit","published_at":"2021-10-07T19:18:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.25.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.25.0/manifests"},{"name":"v0.24.1","sha":"0395c4744581a3d33bf80656f092b19dd75b32fb","kind":"commit","published_at":"2021-09-27T22:31:59.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.24.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.24.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.1/manifests"},{"name":"v0.24.0","sha":"6d4d083acccc68455e09dd45a474b3f6b5215006","kind":"commit","published_at":"2021-09-23T00:55:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.24.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.0/manifests"},{"name":"v0.23.0","sha":"ddfc8e20c0f370d25e7d032b23bef2e3d519506c","kind":"commit","published_at":"2021-09-13T17:06:23.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.23.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.23.0/manifests"},{"name":"v0.22.0","sha":"06dcd3261dadf77ec0d86e7a981eb4aac7008d09","kind":"commit","published_at":"2021-09-03T21:29:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.22.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.22.0/manifests"},{"name":"v0.21.0","sha":"ff828fbac211e1d9e993c309461bd9e0636fc2ec","kind":"commit","published_at":"2021-08-20T17:50:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.21.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.21.0/manifests"},{"name":"v0.20.0","sha":"b0e9b92a257f920bf6b31438a1dba6762fa7390d","kind":"commit","published_at":"2021-08-18T15:00:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.20.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.20.0/manifests"},{"name":"v0.19.1","sha":"fee35dd1753308fc887da744de5d0c66947c7493","kind":"commit","published_at":"2021-06-30T17:10:00.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.19.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.1/manifests"},{"name":"v0.19.0","sha":"2de56c074917b159fdd76fc6b1da974b4c53ca2e","kind":"commit","published_at":"2021-06-29T22:16:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.19.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.0/manifests"},{"name":"v0.18.0","sha":"962e82297c329f728018335858ad619ef3e00648","kind":"commit","published_at":"2021-06-29T18:28:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.18.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.18.0/manifests"},{"name":"v0.17.1","sha":"6dd698d89edee65fdcb7c0b2630b6253ed34deba","kind":"commit","published_at":"2021-06-19T18:32:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.17.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.17.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.1/manifests"},{"name":"v0.17.0","sha":"801e662633304256a05988c868234a2d0ed5a1ae","kind":"commit","published_at":"2021-06-04T16:50:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.17.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.0/manifests"},{"name":"v0.16.1","sha":"8be0d988e7e793d62afd2e9e2a881428322329cb","kind":"commit","published_at":"2021-05-25T21:13:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.16.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.1/manifests"},{"name":"v0.16.0","sha":"80e23bdb506835cdfe26780abcfd977363bae015","kind":"commit","published_at":"2021-05-25T19:01:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.16.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.0/manifests"},{"name":"v0.15.2","sha":"baa859d2ed084eb7c3d5621a255ad6f277533276","kind":"commit","published_at":"2021-05-12T21:28:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.2/manifests"},{"name":"v0.15.1","sha":"032cecbe7f19ca6f6f07d80f8dc902530e4c7502","kind":"commit","published_at":"2021-04-22T20:38:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"1632fdd85ebe8692328ce82b8ac3a3849dbdc315","kind":"commit","published_at":"2021-04-22T19:56:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.0/manifests"},{"name":"v0.14.0","sha":"26a4dd36a8932c7867fcdd6296f50643be30f8a6","kind":"commit","published_at":"2021-03-20T16:23:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.14.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.14.0/manifests"},{"name":"v0.13.1","sha":"40e9c4b146b2cf52112619969f18453ce7fa3234","kind":"commit","published_at":"2021-02-26T20:59:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.13.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.1/manifests"},{"name":"v0.13.0","sha":"6d5ff0fd8e7c39c95d30c960c8ae6e95b91cd9d0","kind":"commit","published_at":"2021-02-25T18:47:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.13.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.0/manifests"},{"name":"v0.12.7","sha":"c5e3b631ac354a6b22d912c6ed8972a433b02eae","kind":"commit","published_at":"2021-02-17T13:14:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.7","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.7/manifests"},{"name":"v0.12.6","sha":"8d838b18a85d2c2f0ee976cf2af491913dbcf98b","kind":"commit","published_at":"2021-02-05T16:26:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.6/manifests"},{"name":"v0.12.5","sha":"b22fd987db989debd8e880e7dfe934d39fd016f3","kind":"commit","published_at":"2021-02-01T17:03:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.5/manifests"},{"name":"v0.12.4","sha":"407769e88cdb5232b72aa573d9643e6624b92743","kind":"commit","published_at":"2021-01-27T16:51:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.4/manifests"},{"name":"v0.12.3","sha":"7bcdafe745a58592552393f8cb32f2d58982aa21","kind":"commit","published_at":"2021-01-22T21:10:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.3/manifests"},{"name":"v0.12.2","sha":"0f6288881bf8db287e07576bf8dd067184745759","kind":"commit","published_at":"2021-01-06T02:32:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.2/manifests"},{"name":"v0.12.1","sha":"bb70b0b43ee794c97266cc352a37804f2068acd2","kind":"commit","published_at":"2021-01-05T00:45:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"37b96a241b043f09f6cfee145c19b425e858f939","kind":"commit","published_at":"2021-01-04T21:50:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.0/manifests"},{"name":"v0.11.1","sha":"e299a5355fffa8a200f7076befeaf4a494d495f7","kind":"commit","published_at":"2020-12-23T18:23:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.11.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.1/manifests"},{"name":"v0.11.0","sha":"6aaf9ee712f41c38eefe17a07a1aa43cac9e7990","kind":"commit","published_at":"2020-12-18T21:59:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.11.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"52bac6e2fd1adb3d8852f0fab6536a81ec037b89","kind":"commit","published_at":"2020-12-10T03:20:53.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.10.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.10.0/manifests"},{"name":"v0.9.2","sha":"f87c59b4eb5d5b1396dcc8ad06a07a0706c4b7c5","kind":"commit","published_at":"2020-12-03T21:32:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.2/manifests"},{"name":"v0.9.1","sha":"6f9ded60ed144de3e837effdee5d96366441e7d3","kind":"commit","published_at":"2020-12-02T12:50:31.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.1/manifests"},{"name":"v0.9.0","sha":"ae71b8832d16b70b0373a518877d169659f07bd9","kind":"commit","published_at":"2020-11-30T16:37:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"71939557e6164712accfd0f7486ef4a6c8459656","kind":"commit","published_at":"2020-11-17T18:21:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.8.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.8.0/manifests"},{"name":"v0.7.1","sha":"dad1d9691c355c643eb3a7f1be1cadde36d913c7","kind":"commit","published_at":"2020-11-12T14:36:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.7.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"9581a0309b570d38037962598d4c30c8d028aaa2","kind":"commit","published_at":"2020-11-11T20:15:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.7.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"b3098f3423d11fe10ea18138177258f6d837d379","kind":"commit","published_at":"2020-11-09T19:18:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.6.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"ecfc471ce51a2a84ec144263592c223816241c7a","kind":"commit","published_at":"2020-11-04T20:47:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.5.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"773581704c736925a7a5485c18bde3f8129f1238","kind":"commit","published_at":"2020-10-30T19:14:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.5.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"f19cb03aa07891e433b5e2e6faa956bc9de83bcf","kind":"commit","published_at":"2020-10-26T15:19:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.4.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"15e2e32103b9aaf6d816fa2c6d9b9dc94ba8c16b","kind":"commit","published_at":"2020-10-23T15:06:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.4.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"1bf1e643ebb49fac1f2f30c1a13ff8b056dec938","kind":"commit","published_at":"2020-10-15T18:41:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.3.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.3.0/manifests"},{"name":"v0.2.0","sha":"956af57d3b8e23d5c607f486b0b65a760a602aad","kind":"commit","published_at":"2020-10-08T18:37:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.2.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"5adfce19e0abdfb0d2c62c80713b90f681c83bf4","kind":"commit","published_at":"2020-09-29T20:33:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0/manifests"},{"name":"v0.1.0-beta.5","sha":"8b81c87d18da91d2a5c8f10fdfb93ec3e05aa1f6","kind":"commit","published_at":"2020-09-26T02:59:19.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.5/manifests"},{"name":"v0.1.0-beta.4","sha":"676544b6ab7a5b70af7c2d3d2d34b23c50996900","kind":"commit","published_at":"2020-08-10T22:28:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.4/manifests"},{"name":"v0.1.0-beta.3","sha":"2d452bf59e0f44de6051ac3f316c8afafe0a929a","kind":"commit","published_at":"2020-08-10T14:33:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.3/manifests"},{"name":"v0.1.0-beta.2","sha":"06f8355fce7901bf88493323831b235ef068dc4a","kind":"commit","published_at":"2020-07-27T19:13:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.2/manifests"},{"name":"v0.1.0-beta.1","sha":"19eadde9ca03c89f7325b8ff09ba8114abbe4dcf","kind":"commit","published_at":"2020-07-27T13:55:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.1/manifests"}]},"repo_metadata_updated_at":"2024-01-05T12:29:05.490Z","dependent_packages_count":0,"downloads":3368,"downloads_period":"last-month","dependent_repos_count":1,"rankings":{"downloads":14.326647564469914,"dependent_repos_count":29.31652099154607,"dependent_packages_count":18.441037397908012,"stargazers_count":5.845272206303725,"forks_count":6.003725462100587,"docker_downloads_count":null,"average":14.786640724465661},"purl":"pkg:brew/syft","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/homebrew/syft","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/homebrew/syft","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/homebrew/syft/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2024-01-04T12:27:37.600Z","issues_count":298,"pull_requests_count":452,"avg_time_to_close_issue":7792267.580882353,"avg_time_to_close_pull_request":493385.82451923075,"issues_closed_count":136,"pull_requests_closed_count":416,"pull_request_authors_count":61,"issue_authors_count":161,"avg_comments_per_issue":2.835570469798658,"avg_comments_per_pull_request":1.0398230088495575,"merged_pull_requests_count":374,"bot_issues_count":0,"bot_pull_requests_count":152,"past_year_issues_count":248,"past_year_pull_requests_count":441,"past_year_avg_time_to_close_issue":3483992.5344827585,"past_year_avg_time_to_close_pull_request":439361.18826405867,"past_year_issues_closed_count":116,"past_year_pull_requests_closed_count":409,"past_year_pull_request_authors_count":57,"past_year_issue_authors_count":139,"past_year_avg_comments_per_issue":2.225806451612903,"past_year_avg_comments_per_pull_request":0.981859410430839,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":152,"past_year_merged_pull_requests_count":369,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues"},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/formulae.brew.sh/packages/syft/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/formulae.brew.sh/packages/syft/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/formulae.brew.sh/packages/syft/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/formulae.brew.sh/packages/syft/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/formulae.brew.sh/packages/syft/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/formulae.brew.sh/packages/syft/codemeta","maintainers":[],"registry":{"name":"formulae.brew.sh","url":"https://formulae.brew.sh","ecosystem":"homebrew","default":true,"packages_count":9470,"maintainers_count":0,"namespaces_count":0,"keywords_count":6859,"github":"homebrew","metadata":{"funded_packages_count":970},"icon_url":"https://github.com/homebrew.png","created_at":"2022-04-12T16:38:29.467Z","updated_at":"2026-08-10T05:08:51.797Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/formulae.brew.sh/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/formulae.brew.sh/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/formulae.brew.sh/namespaces"}},{"id":8680328,"name":"syft-zsh-completion","ecosystem":"alpine","description":"Zsh completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":4,"first_release_published_at":"2023-11-30T17:33:46.000Z","latest_release_published_at":"2024-05-12T07:25:43.000Z","latest_release_number":"0.98.0-r3","last_synced_at":"2026-04-01T03:27:41.934Z","created_at":"2023-12-20T10:35:24.537Z","updated_at":"2026-04-01T03:27:41.934Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.19/community/x86_64/syft-zsh-completion","install_command":"apk add syft-zsh-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{},"repo_metadata_updated_at":null,"dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft-zsh-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.19","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-zsh-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-zsh-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-zsh-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft-zsh-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft-zsh-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft-zsh-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft-zsh-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft-zsh-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft-zsh-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":315,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2024-02-04T22:44:30.162Z","updated_at":"2024-02-04T22:44:30.162Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.19","url":"https://pkgs.alpinelinux.org/packages?branch=v3.19","ecosystem":"alpine","default":false,"packages_count":23031,"maintainers_count":392,"namespaces_count":2,"keywords_count":3179,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":849},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-12-20T09:51:56.346Z","updated_at":"2026-08-10T05:08:27.422Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/namespaces"}},{"id":13013011,"name":"syft","ecosystem":"alpine","description":"Generate a Software Bill of Materials (SBOM) from container images and filesystems","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":2,"first_release_published_at":"2026-01-15T20:32:31.000Z","latest_release_published_at":"2026-02-05T09:16:59.000Z","latest_release_number":"1.38.0-r3","last_synced_at":"2026-04-09T01:08:30.799Z","created_at":"2026-01-31T02:15:08.836Z","updated_at":"2026-08-07T23:35:28.140Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.23/community/x86_64/syft","install_command":"apk add syft","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-07-31T13:50:23.000Z","size":26110,"stargazers_count":9333,"open_issues_count":606,"forks_count":914,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-07-31T15:09:45.114Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-07-31T13:51:01.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36377024,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-07T23:35:28.140Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.23","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":"michal@polanski.me","url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":378,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2026-03-03T16:36:59.374Z","updated_at":"2026-03-03T16:36:59.374Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.23","url":"https://pkgs.alpinelinux.org/packages?branch=v3.23","ecosystem":"alpine","default":false,"packages_count":27576,"maintainers_count":428,"namespaces_count":2,"keywords_count":189,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":733},"icon_url":"https://github.com/alpinelinux.png","created_at":"2026-01-24T14:35:50.739Z","updated_at":"2026-08-12T05:05:17.297Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/namespaces"}},{"id":12656902,"name":"github.com/ANCHORE/syft","ecosystem":"go","description":null,"homepage":null,"licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/ANCHORE/syft","keywords_array":[],"namespace":null,"versions_count":266,"first_release_published_at":"2020-07-27T13:55:11.000Z","latest_release_published_at":"2026-07-27T19:20:49.000Z","latest_release_number":"v1.50.0","last_synced_at":"2026-08-07T22:14:15.744Z","created_at":"2026-01-05T10:05:10.038Z","updated_at":"2026-08-07T23:35:46.043Z","registry_url":"https://pkg.go.dev/github.com/ANCHORE/syft","install_command":"go get github.com/ANCHORE/syft","documentation_url":"https://pkg.go.dev/github.com/ANCHORE/syft#section-documentation","metadata":{},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390713,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-07T23:35:46.043Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.3540680314630436,"dependent_packages_count":5.017401994479231,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.185735012971137},"purl":"pkg:golang/github.com/%21a%21n%21c%21h%21o%21r%21e/syft","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/ANCHORE/syft","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/ANCHORE/syft","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/ANCHORE/syft/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FANCHORE%2Fsyft/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FANCHORE%2Fsyft/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FANCHORE%2Fsyft/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FANCHORE%2Fsyft/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FANCHORE%2Fsyft/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FANCHORE%2Fsyft/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2263068,"maintainers_count":0,"namespaces_count":837425,"keywords_count":122443,"github":"golang","metadata":{"funded_packages_count":65362,"sync_missing_packages_cursor":{"timestamp":"2026-08-12T00:18:10.975284Z","path":"github.com/fhunleth/muontrap","version":"v0.2.1"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-08-12T12:33:12.528Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13128617,"name":"syft","ecosystem":"nixpkgs","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-01T20:23:35.723Z","latest_release_published_at":"2026-02-01T20:23:35.723Z","latest_release_number":"1.18.0","last_synced_at":"2026-03-06T18:23:47.054Z","created_at":"2026-02-01T20:23:16.709Z","updated_at":"2026-08-07T23:35:56.335Z","registry_url":"https://search.nixos.org/packages?channel=24.11\u0026query=syft","install_command":"nix-env -iA nixpkgs.syft","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/by-name/sy/syft/package.nix#L77","metadata":{"nix_attribute":"syft-1.18.0","position":"pkgs/by-name/sy/syft/package.nix:77","platforms":["x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","wasm64-wasi","wasm32-wasi","i686-freebsd","x86_64-freebsd"],"broken":false,"insecure":false,"unfree":false,"outputs":["out"]},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390714,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-07T23:35:56.335Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/syft?channel=24.11\u0026repository_url=https://channels.nixos.org/nixos-24.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/syft","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/syft","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/syft/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/syft/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/syft/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/syft/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/syft/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/syft/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/syft/codemeta","maintainers":[{"uuid":"06kellyjac","login":null,"name":"Jack","email":"hello+nixpkgs@j-k.io","url":"https://github.com/06kellyjac","packages_count":95,"html_url":null,"role":null,"created_at":"2026-03-06T18:23:47.368Z","updated_at":"2026-03-06T18:23:47.368Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers/06kellyjac/packages"},{"uuid":"kashw2","login":null,"name":"Keanu Ashwell","email":"supra4keanu@hotmail.com","url":"https://github.com/kashw2","packages_count":74,"html_url":null,"role":null,"created_at":"2026-03-06T18:23:47.435Z","updated_at":"2026-03-06T18:23:47.435Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers/kashw2/packages"},{"uuid":"developer-guy","login":null,"name":"Batuhan Apaydın","email":"developerguyn@gmail.com","url":"https://github.com/developer-guy","packages_count":18,"html_url":null,"role":null,"created_at":"2026-03-06T18:23:47.319Z","updated_at":"2026-03-06T18:23:47.319Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers/developer-guy/packages"}],"registry":{"name":"nixpkgs-24.11","url":"https://channels.nixos.org/nixos-24.11","ecosystem":"nixpkgs","default":false,"packages_count":121983,"maintainers_count":3777,"namespaces_count":0,"keywords_count":739,"github":"NixOS","metadata":{"funded_packages_count":2012},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.059Z","updated_at":"2026-08-12T05:04:54.096Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/namespaces"}},{"id":12950098,"name":"syft","ecosystem":"nixpkgs","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":null,"versions_count":3,"first_release_published_at":"2026-01-28T04:20:51.315Z","latest_release_published_at":"2026-03-04T03:11:37.488Z","latest_release_number":"1.42.1","last_synced_at":"2026-04-12T17:03:45.537Z","created_at":"2026-01-28T04:20:50.401Z","updated_at":"2026-08-07T23:35:56.388Z","registry_url":"https://search.nixos.org/packages?channel=unstable\u0026query=syft","install_command":"nix-env -iA nixpkgs.syft","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/by-name/sy/syft/package.nix#L78","metadata":{"nix_attribute":"syft-1.42.1","position":"pkgs/by-name/sy/syft/package.nix:78","platforms":["x86_64-darwin","aarch64-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","wasm64-wasi","wasm32-wasi","i686-freebsd","x86_64-freebsd","aarch64-freebsd"],"broken":false,"insecure":false,"unfree":false,"outputs":["out"]},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390714,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-07T23:35:56.388Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/syft?channel=unstable","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/syft","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/syft","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/syft/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/syft/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/syft/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/syft/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/syft/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/syft/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/syft/codemeta","maintainers":[{"uuid":"06kellyjac","login":null,"name":"Jack","email":"hello+nixpkgs@j-k.io","url":"https://github.com/06kellyjac","packages_count":127,"html_url":null,"role":null,"created_at":"2026-03-04T03:11:38.205Z","updated_at":"2026-03-04T03:11:38.205Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers/06kellyjac/packages"},{"uuid":"kashw2","login":null,"name":"Keanu Ashwell","email":"supra4keanu@hotmail.com","url":"https://github.com/kashw2","packages_count":82,"html_url":null,"role":null,"created_at":"2026-03-04T03:11:38.296Z","updated_at":"2026-03-04T03:11:38.296Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers/kashw2/packages"},{"uuid":"developer-guy","login":null,"name":"Batuhan Apaydın","email":"developerguyn@gmail.com","url":"https://github.com/developer-guy","packages_count":18,"html_url":null,"role":null,"created_at":"2026-03-04T03:11:38.170Z","updated_at":"2026-03-04T03:11:38.170Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers/developer-guy/packages"}],"registry":{"name":"nixpkgs-unstable","url":"https://channels.nixos.org/nixos-unstable","ecosystem":"nixpkgs","default":true,"packages_count":152653,"maintainers_count":4862,"namespaces_count":0,"keywords_count":3247,"github":"NixOS","metadata":{"funded_packages_count":4207},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:52.762Z","updated_at":"2026-08-12T05:03:09.237Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/namespaces"}},{"id":13013012,"name":"syft-bash-completion","ecosystem":"alpine","description":"Bash completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":2,"first_release_published_at":"2026-01-15T20:32:31.000Z","latest_release_published_at":"2026-02-05T09:16:59.000Z","latest_release_number":"1.38.0-r3","last_synced_at":"2026-04-09T01:08:56.568Z","created_at":"2026-01-31T02:15:08.849Z","updated_at":"2026-08-07T23:36:07.753Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.23/community/x86_64/syft-bash-completion","install_command":"apk add syft-bash-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390736,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-07T23:36:07.752Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft-bash-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.23","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-bash-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-bash-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-bash-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft-bash-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft-bash-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft-bash-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft-bash-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft-bash-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft-bash-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":"michal@polanski.me","url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":378,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2026-03-03T16:37:35.607Z","updated_at":"2026-03-03T16:37:35.607Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.23","url":"https://pkgs.alpinelinux.org/packages?branch=v3.23","ecosystem":"alpine","default":false,"packages_count":27576,"maintainers_count":428,"namespaces_count":2,"keywords_count":189,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":733},"icon_url":"https://github.com/alpinelinux.png","created_at":"2026-01-24T14:35:50.739Z","updated_at":"2026-08-12T05:05:17.297Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/namespaces"}},{"id":12899902,"name":"syft","ecosystem":"nixpkgs","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-01-27T10:06:25.933Z","latest_release_published_at":"2026-01-27T10:06:25.933Z","latest_release_number":"0.80.0","last_synced_at":"2026-04-13T11:29:35.423Z","created_at":"2026-01-27T10:06:25.411Z","updated_at":"2026-08-07T23:36:08.729Z","registry_url":"https://search.nixos.org/packages?channel=23.05\u0026query=syft","install_command":"nix-env -iA nixpkgs.syft","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-23.05/pkgs/tools/admin/syft/default.nix#L71","metadata":{"nix_attribute":"syft-0.80.0","position":"pkgs/tools/admin/syft/default.nix:71","platforms":["x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mipsel-linux","mips64el-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux"],"broken":false,"insecure":false,"unfree":false,"outputs":["out"]},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390736,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-07T23:36:08.728Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/syft?channel=23.05\u0026repository_url=https://channels.nixos.org/nixos-23.05","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/syft","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/syft","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/syft/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/syft/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/syft/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/syft/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/syft/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/syft/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/syft/codemeta","maintainers":[{"uuid":"06kellyjac","login":null,"name":"Jack","email":"hello+nixpkgs@j-k.io","url":"https://github.com/06kellyjac","packages_count":101,"html_url":null,"role":null,"created_at":"2026-03-04T04:42:31.830Z","updated_at":"2026-03-04T04:42:31.830Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers/06kellyjac/packages"},{"uuid":"developer-guy","login":null,"name":"Batuhan Apaydın","email":"developerguyn@gmail.com","url":"https://github.com/developer-guy","packages_count":15,"html_url":null,"role":null,"created_at":"2026-03-04T04:42:31.875Z","updated_at":"2026-03-04T04:42:31.875Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers/developer-guy/packages"}],"registry":{"name":"nixpkgs-23.05","url":"https://channels.nixos.org/nixos-23.05","ecosystem":"nixpkgs","default":false,"packages_count":101092,"maintainers_count":2622,"namespaces_count":0,"keywords_count":613,"github":"NixOS","metadata":{"funded_packages_count":1254},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.882Z","updated_at":"2026-08-12T05:03:51.195Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/namespaces"}},{"id":7257512,"name":"syft-bash-completion","ecosystem":"alpine","description":"Bash completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":69,"first_release_published_at":"2023-04-01T18:45:50.000Z","latest_release_published_at":"2026-07-13T21:50:10.000Z","latest_release_number":"1.46.0-r0","last_synced_at":"2026-07-14T03:29:06.093Z","created_at":"2023-04-01T19:16:06.910Z","updated_at":"2026-08-07T23:36:10.545Z","registry_url":"https://pkgs.alpinelinux.org/package/edge/community/x86_64/syft-bash-completion","install_command":"apk add syft-bash-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2025-10-20T14:22:16.000Z","size":23003,"stargazers_count":7796,"open_issues_count":500,"forks_count":720,"subscribers_count":62,"default_branch":"main","last_synced_at":"2025-10-20T16:13:38.101Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2025-10-20T14:24:07.000Z","dependencies_parsed_at":"2023-12-20T09:43:51.606Z","dependency_job_id":"3d1fd421-c43b-4d60-87a0-71ec0266d70f","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":240,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":280449175,"owners_count":26332601,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-22T02:00:06.515Z","response_time":63,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"anchore","name":"Anchore, Inc.","uuid":"16208487","kind":"organization","description":"","email":"info@anchore.com","website":"https://anchore.com/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16208487?v=4","repositories_count":43,"last_synced_at":"2023-03-02T09:35:13.089Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/anchore","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-13T02:25:02.273Z","updated_at":"2023-03-02T09:35:13.093Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore/repositories"},"tags":[{"name":"v1.34.2","sha":"0c98a364d503789ff8d7f122763bb8748de9772f","kind":"tag","published_at":"2025-10-16T12:19:26.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.34.2","html_url":"https://github.com/anchore/syft/releases/tag/v1.34.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.34.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.2/manifests"},{"name":"v1.34.1","sha":"e9a8bc5ab97f94b7f9210d7a0f4a981cdbb22232","kind":"tag","published_at":"2025-10-15T15:27:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.34.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.34.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.34.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.1/manifests"},{"name":"v1.34.0","sha":"6d790ec6ec98b263dae0c54259859b35c3527e1b","kind":"tag","published_at":"2025-10-14T22:25:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.34.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.34.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.34.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.0/manifests"},{"name":"v1.33.0","sha":"b87b9191497c2d410b42c05591347d428129fd2a","kind":"tag","published_at":"2025-09-15T20:38:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.33.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.33.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.33.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.33.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.33.0/manifests"},{"name":"v1.32.0","sha":"2d8e337d3469712c7d92770792f0117ad82c4ad3","kind":"tag","published_at":"2025-08-26T21:47:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.32.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.32.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.32.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.32.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.32.0/manifests"},{"name":"v1.31.0","sha":"ab9db0024ed35ab6a4e33e539593f5a3c58a5594","kind":"tag","published_at":"2025-08-13T14:50:45.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.31.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.31.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.31.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.31.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.31.0/manifests"},{"name":"v1.30.0","sha":"49736e7c4acd3cb1aed2d3a8c8cdcd696ac77166","kind":"tag","published_at":"2025-08-08T18:21:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.30.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.30.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.30.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.30.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.30.0/manifests"},{"name":"v1.29.1","sha":"386ef842d99a72027fb5fd1085fde87883640eaf","kind":"tag","published_at":"2025-07-30T18:16:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.29.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.29.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.29.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.1/manifests"},{"name":"v1.29.0","sha":"6f36b586ba1cc49074573d07ca397d18e9eecd16","kind":"tag","published_at":"2025-07-21T19:36:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.29.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.29.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.0/manifests"},{"name":"v1.28.0","sha":"e8b62ab9aca2e896ab608c118619c5a7831bc737","kind":"tag","published_at":"2025-07-02T16:25:07.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.28.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.28.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.28.0/manifests"},{"name":"v1.27.1","sha":"10f06317104361183b4cb803c0e6ac1727257551","kind":"tag","published_at":"2025-06-12T13:39:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.27.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.27.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.27.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.1/manifests"},{"name":"v1.27.0","sha":"18f9b5ab58aa04dda61a3eed8123bd89470befe9","kind":"tag","published_at":"2025-06-09T18:36:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.27.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.27.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.0/manifests"},{"name":"v1.26.1","sha":"7bfb4c86a6d7e5343c45c2844a232b6c7ba4c51c","kind":"tag","published_at":"2025-05-22T12:36:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.26.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.26.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.26.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.1/manifests"},{"name":"v1.26.0","sha":"ac883f52edb8ca1f5a0a61d12c288d4b34ea3897","kind":"tag","published_at":"2025-05-20T21:27:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.26.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.26.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.0/manifests"},{"name":"v1.25.1","sha":"db77b54c019c9aae142d13ca642ddb56d0deefa6","kind":"tag","published_at":"2025-05-16T18:53:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.25.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.25.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.25.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.1/manifests"},{"name":"v1.25.0","sha":"2d4fe513ecec7af9626b9dada586c7a0ff63a67d","kind":"tag","published_at":"2025-05-16T16:29:38.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.25.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.25.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.0/manifests"},{"name":"v1.24.0","sha":"3c7018a853ab7b311db9ff70e1cf3113b46d9c0c","kind":"tag","published_at":"2025-05-14T14:51:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.24.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.24.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.24.0/manifests"},{"name":"v1.23.1","sha":"a714fb8391471c6ddf6e583229d982d1316d64a8","kind":"tag","published_at":"2025-04-25T14:52:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.23.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.23.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.23.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.1/manifests"},{"name":"v1.23.0","sha":"4211d796672ab21250a4d6fd8e45204d6dc00d0e","kind":"tag","published_at":"2025-04-24T20:16:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.23.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.0/manifests"},{"name":"v1.22.0","sha":"9ab83874ed21c07479d8eeddd88a6894e1ff8537","kind":"tag","published_at":"2025-04-01T14:37:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.22.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.22.0/manifests"},{"name":"v1.21.0","sha":"7bdbfc04781a18827c30a505d64a8671c9827bd7","kind":"tag","published_at":"2025-03-17T18:52:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.21.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.21.0/manifests"},{"name":"v1.20.0","sha":"46522bcc5dff8b65b61a7cda1393abe515802306","kind":"tag","published_at":"2025-02-21T20:44:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.20.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.20.0/manifests"},{"name":"v1.19.0","sha":"222e6548a96f8c80015c1d24f01dea3052a04893","kind":"tag","published_at":"2025-01-22T19:57:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.19.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.19.0/manifests"},{"name":"v1.18.1","sha":"5e16e5031a13f8a11057feb8544decebfc43b4ed","kind":"tag","published_at":"2024-12-13T18:41:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.18.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.18.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.18.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.1/manifests"},{"name":"v1.18.0","sha":"d38efb0b7fb7106909bc532a4efc68b78a917a34","kind":"tag","published_at":"2024-12-09T21:02:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.18.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.0/manifests"},{"name":"v1.17.0","sha":"a8d4202d77b6b31e75ce5af09a8b03ad14e533d3","kind":"tag","published_at":"2024-11-21T14:39:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.17.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.17.0/manifests"},{"name":"v1.16.0","sha":"8a41d772509d37267a65e0b425808e883e4b9dce","kind":"tag","published_at":"2024-11-04T22:29:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.16.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.16.0/manifests"},{"name":"v1.15.0","sha":"55cc1877ef246d8cabfd9bbeb0a8747b59c03431","kind":"tag","published_at":"2024-10-28T21:11:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.15.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.15.0/manifests"},{"name":"v1.14.2","sha":"e4e985b9b05b9570648399adf292ab7f659b4cef","kind":"tag","published_at":"2024-10-21T17:20:27.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.14.2","html_url":"https://github.com/anchore/syft/releases/tag/v1.14.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.14.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.2/manifests"},{"name":"v1.14.1","sha":"754cebee6414c614acf03ee0f87abfcf6176e051","kind":"tag","published_at":"2024-10-15T13:04:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.14.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.14.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.14.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.1/manifests"},{"name":"v1.14.0","sha":"ccbee94b876240284c25c8931c6233fc71a5b7fb","kind":"tag","published_at":"2024-10-07T20:40:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.14.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.0/manifests"},{"name":"v1.13.0","sha":"01de99b25304ec95197c00b21d698f127b31a887","kind":"tag","published_at":"2024-09-24T13:28:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.13.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.13.0/manifests"},{"name":"v1.12.2","sha":"fcd5ec951de6b3fc1f1aa2a36968356d2eb22170","kind":"tag","published_at":"2024-09-11T14:12:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.12.2","html_url":"https://github.com/anchore/syft/releases/tag/v1.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.2/manifests"},{"name":"v1.12.1","sha":"c33a51d3d839ba619ea2217ee00a56be23f9fb9f","kind":"tag","published_at":"2024-09-10T20:42:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.12.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.1/manifests"},{"name":"v1.12.0","sha":"dbc4238f63c027efc09ce5fe51e069c1145f6846","kind":"tag","published_at":"2024-09-10T17:37:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.12.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.0/manifests"},{"name":"v1.11.1","sha":"95b4a88256bddebb91831250f28f602f8c36552a","kind":"tag","published_at":"2024-08-20T16:25:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.11.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.1/manifests"},{"name":"v1.11.0","sha":"19cc664cf8e7020dd692a62efcbba98ab670bde9","kind":"tag","published_at":"2024-08-09T17:52:21.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.11.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.0/manifests"},{"name":"v1.10.0","sha":"a4b5dcd0df80f6a58c8610e25104647710c1da5d","kind":"tag","published_at":"2024-07-30T16:13:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.10.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.10.0/manifests"},{"name":"v1.9.0","sha":"4e09908ba124dca7e6f1f6e7dc4f4663fae658ca","kind":"tag","published_at":"2024-07-11T17:32:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.9.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.9.0/manifests"},{"name":"v1.8.0","sha":"1eae9333a9450c135ff929578597c79b01c9f5ff","kind":"tag","published_at":"2024-06-24T15:43:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.8.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.8.0/manifests"},{"name":"v1.7.0","sha":"22d57314826fce1bff469d8173884489f8212925","kind":"tag","published_at":"2024-06-14T19:48:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.7.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.7.0/manifests"},{"name":"v1.6.0","sha":"c43f4fb416c34c1c4b3997373689d8d4c0fb9b36","kind":"tag","published_at":"2024-06-10T15:39:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.6.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"ac34808b9c55bb274b1205f9b5d9cf495239577d","kind":"tag","published_at":"2024-05-28T15:11:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.5.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.5.0/manifests"},{"name":"v1.4.1","sha":"c200896a9644f9b6bd4bc3785c848276c33bb53c","kind":"tag","published_at":"2024-05-09T19:45:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.4.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.1/manifests"},{"name":"v1.4.0","sha":"4194a2cd34d2f15dd9a96774ba2fbc5463db4c58","kind":"tag","published_at":"2024-05-09T18:14:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.4.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"87cd6c8c48239a20c413f6461e90000ff30ee601","kind":"tag","published_at":"2024-04-26T15:01:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.3.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"dde5d349b1eef740c285255e6a9e3a8f5c9938e1","kind":"tag","published_at":"2024-04-12T18:31:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.2.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.2.0/manifests"},{"name":"v1.1.1","sha":"1e31356c49bf2c30fd80c833482e1fbe4133ff83","kind":"tag","published_at":"2024-04-04T14:52:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.1.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"f4e18961b979f5e6d0cc3b1e4fce608c8ceb29d8","kind":"tag","published_at":"2024-03-25T21:41:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.1.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"1b121ac3f4d589060ddf1fac0bcd6871ea4731e3","kind":"tag","published_at":"2024-03-06T19:51:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.0.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"356f7c92b464b69be3a2a898cd98a63037eeadcc","kind":"tag","published_at":"2024-02-29T14:50:50.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.0.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.0/manifests"},{"name":"v0.105.1","sha":"928511ea0f1449e057e8057e38743d258b22476b","kind":"tag","published_at":"2024-02-26T16:52:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.105.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.105.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.105.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.1/manifests"},{"name":"v0.105.0","sha":"65cadda48653d2452a7e41a47a60d2934e8fcb07","kind":"tag","published_at":"2024-02-14T21:16:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.105.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.105.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.105.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.0/manifests"},{"name":"v0.104.0","sha":"bd0cb916df4376a06e56ef7f3cc0da6659d7c2c6","kind":"tag","published_at":"2024-02-07T20:51:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.104.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.104.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.104.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.104.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.104.0/manifests"},{"name":"v0.103.1","sha":"377538e4a692b8070716eb091456b112ccc2cb81","kind":"tag","published_at":"2024-01-31T17:09:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.103.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.103.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.103.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.1/manifests"},{"name":"v0.103.0","sha":"bbe7fa180a38079318fd4a75d6276720374ccecd","kind":"tag","published_at":"2024-01-31T16:34:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.103.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.103.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.103.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.0/manifests"},{"name":"v0.102.0","sha":"d7c51e5c82de8b64b992f5962842c20903b5934a","kind":"tag","published_at":"2024-01-26T14:34:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.102.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.102.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.102.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.102.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.102.0/manifests"},{"name":"v0.101.1","sha":"3eab5932e5271eea5506ab9710239b1415c827f8","kind":"tag","published_at":"2024-01-19T22:02:00.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.101.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.101.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.101.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.1/manifests"},{"name":"v0.101.0","sha":"297ece69045d6d73a184ed955a99d90769b1cb45","kind":"tag","published_at":"2024-01-17T20:41:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.101.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.101.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.101.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.0/manifests"},{"name":"v0.100.0","sha":"a16a4ad6c993aaaa1ec502667c215b0e8c8e51ff","kind":"tag","published_at":"2024-01-05T21:33:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.100.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.100.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.100.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.100.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.100.0/manifests"},{"name":"v0.99.0","sha":"3cffa0b7fd276a35123c48e45407c4f402f2c58f","kind":"tag","published_at":"2023-12-21T16:18:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.99.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.99.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.99.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.99.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.99.0/manifests"},{"name":"v0.98.0","sha":"5c8dd4c3a7632dcfd999bab7a5b73c3180f1b628","kind":"tag","published_at":"2023-11-29T14:52:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.98.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.98.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.98.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.98.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.98.0/manifests"},{"name":"v0.97.1","sha":"7cfb5f630a7a2105d49d65eaaaa2e2c06e4eda73","kind":"tag","published_at":"2023-11-17T21:03:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.97.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.97.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.97.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.1/manifests"},{"name":"v0.97.0","sha":"1c787f436fca20cbec4541f978ed2a634b880c97","kind":"tag","published_at":"2023-11-16T22:56:21.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.97.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.97.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.97.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.0/manifests"},{"name":"v0.96.0","sha":"0891d35e0774f175e3a3f170edcce9ad2f4f015b","kind":"tag","published_at":"2023-11-09T14:04:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.96.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.96.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.96.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.96.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.96.0/manifests"},{"name":"v0.95.0","sha":"9b98785aab9346999a0b5e9f5e4b4e63a1b1916c","kind":"tag","published_at":"2023-11-07T16:43:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.95.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.95.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.95.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.95.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.95.0/manifests"},{"name":"v0.94.0","sha":"8f6bdde6662aa8050a71eadbdb7bd5a3b079a56d","kind":"tag","published_at":"2023-10-20T17:21:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.94.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.94.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.94.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.94.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.94.0/manifests"},{"name":"v0.93.0","sha":"0748945c8341a06415ac80e624b84e8d3f548d39","kind":"tag","published_at":"2023-10-10T17:27:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.93.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.93.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.93.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.93.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.93.0/manifests"},{"name":"v0.92.0","sha":"8f57d22f639e132cbd87324abacd864232c611ce","kind":"tag","published_at":"2023-09-27T15:40:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.92.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.92.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.92.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.92.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.92.0/manifests"},{"name":"v0.91.0","sha":"b7fa75d7f82a6816d307805ac07e6965c799e938","kind":"tag","published_at":"2023-09-20T19:41:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.91.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.91.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.91.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.91.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.91.0/manifests"},{"name":"v0.90.0","sha":"b82c0ffc3417bdc8c38f4633af95a668ec29fa35","kind":"commit","published_at":"2023-09-11T16:12:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.90.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.90.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.90.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.90.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.90.0/manifests"},{"name":"v0.89.0","sha":"b454160549bbd199e0a5693750856f30b41767f7","kind":"commit","published_at":"2023-08-31T14:50:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.89.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.89.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.89.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.89.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.89.0/manifests"},{"name":"v0.88.0","sha":"dd09e0362e46bee7285e0fca5ed96e398c314380","kind":"commit","published_at":"2023-08-25T20:45:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.88.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.88.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.88.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.88.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.88.0/manifests"},{"name":"v0.87.1","sha":"4762ba0943785fe778276893388e839e01787b45","kind":"commit","published_at":"2023-08-17T16:55:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.87.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.87.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.87.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.1/manifests"},{"name":"v0.87.0","sha":"b3d7ba569b64376cf33df717e3bc40d8375e033b","kind":"commit","published_at":"2023-08-14T15:37:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.87.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.87.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.87.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.0/manifests"},{"name":"v0.86.1","sha":"e2f7befbfbf88053dfb2007c6499a4bb2d232c3c","kind":"commit","published_at":"2023-07-31T17:29:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.86.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.86.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.86.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.1/manifests"},{"name":"v0.86.0","sha":"f14742b3f3a6f8cd4bc696dbafee53ab1d665da7","kind":"commit","published_at":"2023-07-31T16:02:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.86.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.86.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.86.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.0/manifests"},{"name":"v0.85.0","sha":"4fc17edd146af34ab06f5b0443ef8ddac3aaf076","kind":"commit","published_at":"2023-07-12T17:14:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.85.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.85.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.85.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.85.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.85.0/manifests"},{"name":"v0.84.1","sha":"791d1f955215f1dad383c9835e4d3c01267dc0f5","kind":"commit","published_at":"2023-06-28T16:05:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.84.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.84.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.84.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.1/manifests"},{"name":"v0.84.0","sha":"5d54e6e847192f63db80c9a7ee23197476c632ce","kind":"commit","published_at":"2023-06-20T16:08:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.84.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.84.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.84.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.0/manifests"},{"name":"v0.83.1","sha":"a1bba36d514c3ff0f34635b9cdc9f07a92ea793b","kind":"commit","published_at":"2023-06-14T15:45:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.83.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.83.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.83.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.1/manifests"},{"name":"v0.83.0","sha":"1764e1c3f6bd66781f8350d957a1f95e4d9ad3de","kind":"commit","published_at":"2023-06-05T19:04:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.83.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.83.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.83.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.0/manifests"},{"name":"v0.82.0","sha":"4ac8fdf6df0da4cd6f76820dbec9f490ee56bcba","kind":"commit","published_at":"2023-05-23T16:58:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.82.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.82.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.82.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.82.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.82.0/manifests"},{"name":"v0.81.0","sha":"334a775cb9cd6bf50033de1bb3aa04f46b669f5d","kind":"commit","published_at":"2023-05-19T14:21:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.81.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.81.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.81.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.81.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.81.0/manifests"},{"name":"v0.80.0","sha":"0f1aed447751f92dcc0165b56aa474ec9706805e","kind":"commit","published_at":"2023-05-05T15:41:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.80.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.80.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.80.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.80.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.80.0/manifests"},{"name":"v0.79.0","sha":"b2b332e8b2b66af0905e98b54ebd713a922be1a8","kind":"commit","published_at":"2023-04-21T13:34:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.79.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.79.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.79.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.79.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.79.0/manifests"},{"name":"v0.78.0","sha":"244b797a199458f504758c0e3a775572a021e629","kind":"commit","published_at":"2023-04-17T16:26:07.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.78.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.78.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.78.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.78.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.78.0/manifests"},{"name":"v0.77.0","sha":"dd30c99bc2439cb91e3d084eb21e1040dd5a54dc","kind":"commit","published_at":"2023-04-11T14:13:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.77.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.77.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.77.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.77.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.77.0/manifests"},{"name":"v0.76.1","sha":"7845381331e873f65fd5013f44b7d85168ced5f5","kind":"commit","published_at":"2023-04-05T17:59:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.76.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.76.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.76.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.1/manifests"},{"name":"v0.76.0","sha":"dfcc07e5122217ca9e2fc75817c593356fc0c405","kind":"commit","published_at":"2023-03-31T14:04:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.76.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.76.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.76.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.0/manifests"},{"name":"v0.75.0","sha":"cc0a376aba43e7f9c5fe66320643f72088533838","kind":"commit","published_at":"2023-03-13T17:26:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.75.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.75.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.75.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.75.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.75.0/manifests"},{"name":"v0.74.1","sha":"41cbbe09b205e3b80e8a57d4f7a509b5f938557d","kind":"commit","published_at":"2023-03-07T17:54:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.74.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.74.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.74.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.1/manifests"},{"name":"v0.74.0","sha":"5f90d0371873faf5eb8f2e748909b32294be6263","kind":"commit","published_at":"2023-03-01T20:35:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.74.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.74.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.74.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.0/manifests"},{"name":"v0.72.1","sha":"be71f7c6aea3fd663e0f059df1d8060c2f6e916d","kind":"commit","published_at":"2023-02-22T21:34:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.72.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.72.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.72.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.1/manifests"},{"name":"v0.73.0","sha":"aa151da5fe2a1b11502c852fd2d3ad462c1d245f","kind":"commit","published_at":"2023-02-22T19:08:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.73.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.73.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.73.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.73.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.73.0/manifests"},{"name":"v0.72.0","sha":"2642a3616170ccbda9d8c8cb4f4a6b0fd5c63da9","kind":"commit","published_at":"2023-02-16T15:22:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.72.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.72.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.72.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.0/manifests"},{"name":"v0.71.0","sha":"88c81d33edc67b0b9636d0046417a9373ac8b74f","kind":"commit","published_at":"2023-02-09T16:35:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.71.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.71.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.71.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.71.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.71.0/manifests"},{"name":"v0.70.0","sha":"9995950c70e849f9921919faffbfcf46401f71f3","kind":"commit","published_at":"2023-02-03T18:06:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.70.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.70.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.70.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.70.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.70.0/manifests"},{"name":"v0.69.1","sha":"1530ef354ffaf59cef6a02c949f2cdb82353954f","kind":"commit","published_at":"2023-01-31T16:53:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.69.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.69.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.69.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.1/manifests"},{"name":"v0.69.0","sha":"b81c9805dcc9bf25dad7659fd9c2bbf7dd3f3d90","kind":"commit","published_at":"2023-01-30T18:47:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.69.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.69.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.69.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.0/manifests"},{"name":"v0.68.1","sha":"4c0aef09b8d7fb78200b04416f474b90b79370de","kind":"commit","published_at":"2023-01-25T17:18:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.68.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.68.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.68.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.1/manifests"},{"name":"v0.68.0","sha":"e58050bac045be672621047d5699b88884e2da62","kind":"commit","published_at":"2023-01-20T14:49:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.68.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.68.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.68.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.0/manifests"},{"name":"v0.66.2","sha":"03971ace43b877e371c13e3f786c1f6c3a4ec507","kind":"commit","published_at":"2023-01-17T21:26:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.66.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.2/manifests"},{"name":"v0.66.1","sha":"ac94bf530c7b1e6ee5df1ed0f9f6454fca8bc918","kind":"commit","published_at":"2023-01-12T22:42:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.66.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.1/manifests"},{"name":"v0.66.0","sha":"260cb4c72d001b63e7462ed214caeb0aab605714","kind":"commit","published_at":"2023-01-12T20:03:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.66.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.0/manifests"},{"name":"v0.65.0","sha":"bc1edb9c8a2fb4824bfdcac6147edc2bbf47aaf6","kind":"commit","published_at":"2023-01-04T16:34:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.65.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.65.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.65.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.65.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.65.0/manifests"},{"name":"v0.64.0","sha":"e1e489a2849c8432781a7cb58b257fa935efa1cf","kind":"commit","published_at":"2022-12-23T13:37:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.64.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.64.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.64.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.64.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.64.0/manifests"},{"name":"v0.63.0","sha":"23a3173c9f2461e5906d1b9e3ac20b4806d74777","kind":"commit","published_at":"2022-12-12T17:55:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.63.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.63.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.63.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.63.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.63.0/manifests"},{"name":"v0.62.3","sha":"247b054ab56f848c477495218754166272f470b5","kind":"commit","published_at":"2022-11-30T16:11:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.3/manifests"},{"name":"v0.62.2","sha":"0cbd0cc70377d5b1b11b808fbbf9ddec450c68ee","kind":"commit","published_at":"2022-11-28T15:43:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.2/manifests"},{"name":"v0.62.1","sha":"098e61dcc81d7a6d666bc62a2166c9b8f32c61bc","kind":"commit","published_at":"2022-11-21T14:26:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.1/manifests"},{"name":"v0.62.0","sha":"da4b2df57640e03f273a2e7e9b04eca40555e139","kind":"commit","published_at":"2022-11-18T18:42:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.0/manifests"},{"name":"v0.61.0","sha":"67888ee855ad37948bfee98e3aa7d592b4f91e95","kind":"commit","published_at":"2022-11-18T14:45:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.61.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.61.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.61.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.61.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.61.0/manifests"},{"name":"v0.60.3","sha":"bc9740d50a38e9660f2f98ed91d84c6d8799cf70","kind":"commit","published_at":"2022-11-03T14:38:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.3/manifests"},{"name":"v0.60.2","sha":"35f0f2931e310882fe7117c41d57a185d72ca498","kind":"commit","published_at":"2022-11-02T14:05:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.2/manifests"},{"name":"v0.60.1","sha":"ba57f3db5189c632ecaa02f9cf0b634c5a55099c","kind":"commit","published_at":"2022-11-01T16:28:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.1/manifests"},{"name":"v0.60.0","sha":"4c5c6f6319d931f324c3a15a88ba2593109cbbe2","kind":"commit","published_at":"2022-11-01T14:30:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.0/manifests"},{"name":"v0.59.0","sha":"41bc6bb410352845f22766e27dd48ba93aa825a4","kind":"commit","published_at":"2022-10-14T19:54:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.59.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.59.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.59.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.59.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.59.0/manifests"},{"name":"v0.58.0","sha":"b9b13d5525df89194d332467f692bc28bc68d07f","kind":"commit","published_at":"2022-09-29T18:45:59.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.58.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.58.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.58.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.58.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.58.0/manifests"},{"name":"v0.57.0","sha":"04d288b3643f906255af88108f27712bb2be5b63","kind":"commit","published_at":"2022-09-19T20:08:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.57.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.57.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.57.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.57.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.57.0/manifests"},{"name":"v0.56.0","sha":"c5dca001e267d2a91ff82e53ca72535ceef6af02","kind":"commit","published_at":"2022-09-09T18:59:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.56.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.56.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.56.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.56.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.56.0/manifests"},{"name":"v0.55.0","sha":"a7966a4d9d8155be788af33fe5e5af2e40043f82","kind":"commit","published_at":"2022-08-29T19:28:19.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.55.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.55.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.55.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.55.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.55.0/manifests"},{"name":"v0.54.0","sha":"21eb77206020c04c9ca5316562e32179c73926a9","kind":"commit","published_at":"2022-08-16T18:14:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.54.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.54.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.54.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.54.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.54.0/manifests"},{"name":"v0.53.4","sha":"69bde44c6e50a5838cdd2c2c821edb0111013178","kind":"commit","published_at":"2022-08-03T16:24:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.4/manifests"},{"name":"v0.53.3","sha":"042304ee4c614708b4e293f525c5d0a435ede2cf","kind":"commit","published_at":"2022-08-03T13:46:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.3/manifests"},{"name":"v0.53.2","sha":"69fb0a6f3bd6f0281e0d466ab7db23090a3ebc65","kind":"commit","published_at":"2022-08-02T19:25:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.2/manifests"},{"name":"v0.53.1","sha":"f5d02d4e527d3fe1906fd209ce036f58049979f3","kind":"commit","published_at":"2022-08-02T15:44:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.1/manifests"},{"name":"v0.53.0","sha":"b7f587f5dcae631b76d2f80ed2a3b9a207972d80","kind":"commit","published_at":"2022-08-02T13:42:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.0/manifests"},{"name":"v0.52.0","sha":"ba9adb17ebb510a2a3bd2b641738b1d9235e1f3e","kind":"commit","published_at":"2022-07-21T13:17:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.52.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.52.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.52.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.52.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.52.0/manifests"},{"name":"v0.51.0","sha":"470b13045bbbf150f3c79d1487a01ae6acc5592d","kind":"commit","published_at":"2022-07-11T14:09:08.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.51.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.51.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.51.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.51.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.51.0/manifests"},{"name":"v0.50.0","sha":"69134ed3b54bc8b1d86d868611f7d069ce3290a8","kind":"commit","published_at":"2022-07-05T15:57:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.50.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.50.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.50.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.50.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.50.0/manifests"},{"name":"v0.49.0","sha":"d5e12ff89c2d3af684152dd401618533a6f1b67e","kind":"commit","published_at":"2022-06-24T15:05:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.49.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.49.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.49.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.49.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.49.0/manifests"},{"name":"v0.48.1","sha":"03e37044d437294b0aac44a4e9277eb8f6c8be3f","kind":"commit","published_at":"2022-06-16T18:56:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.48.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.48.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.48.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.1/manifests"},{"name":"v0.48.0","sha":"9e72771b851f1657ade0c2214569f675cf0813f3","kind":"commit","published_at":"2022-06-16T14:43:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.48.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.48.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.48.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.0/manifests"},{"name":"v0.47.0","sha":"f15d4a9984428103a60e2298d0755b3adcc32a3a","kind":"commit","published_at":"2022-06-08T21:39:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.47.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.47.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.47.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.47.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.47.0/manifests"},{"name":"v0.46.3","sha":"7cb8e1fc14a278ec5afce379623a47577aba9917","kind":"commit","published_at":"2022-05-25T21:40:08.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.3/manifests"},{"name":"v0.46.2","sha":"d41afe05eb8fecd2906f5db9661910dbc99fc3dd","kind":"commit","published_at":"2022-05-19T20:10:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.2/manifests"},{"name":"v0.46.1","sha":"03ee4fdf5e87907c5a49ae353c44682894bb411c","kind":"commit","published_at":"2022-05-12T16:56:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.1/manifests"},{"name":"v0.46.0","sha":"91e2fd8532254216a83c80891611751d0c8fba7b","kind":"commit","published_at":"2022-05-11T22:35:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.0/manifests"},{"name":"v0.45.1","sha":"37927b8b23cac234289a73aa3e886675d463e477","kind":"commit","published_at":"2022-05-03T13:38:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.45.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.45.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.45.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.1/manifests"},{"name":"v0.45.0","sha":"36973021fad57baf443ffa88181394b87ce109a0","kind":"commit","published_at":"2022-04-29T15:18:45.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.45.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.45.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.45.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.0/manifests"},{"name":"v0.44.1","sha":"248023baafdf2a74f8bdaf98beaee3f40584bb7d","kind":"commit","published_at":"2022-04-15T17:00:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.44.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.44.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.44.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.1/manifests"},{"name":"v0.44.0","sha":"b46d044d7e3afc2ee09fd5ff26635f783628126e","kind":"commit","published_at":"2022-04-11T18:56:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.44.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.44.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.44.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.0/manifests"},{"name":"v0.43.2","sha":"e415bb21e7a609c12dc37a2d6395796fb675e3fe","kind":"commit","published_at":"2022-04-06T21:15:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.43.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.2/manifests"},{"name":"v0.43.1","sha":"748cfbf00647df3366ec3c4ad89d87762625da5a","kind":"commit","published_at":"2022-04-06T16:27:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.43.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.1/manifests"},{"name":"v0.43.0","sha":"f24bbc1838351e4e408368f3312c76db6552e71e","kind":"commit","published_at":"2022-03-31T19:45:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.43.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.0/manifests"},{"name":"v0.42.4","sha":"a7db43f5ec159cad98d0298a2375ee1f4c397894","kind":"commit","published_at":"2022-03-24T14:11:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.4/manifests"},{"name":"v0.42.3","sha":"cc2c0e57a0d02a1719b4e34d0793f09e9699c8b0","kind":"commit","published_at":"2022-03-23T18:34:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.3/manifests"},{"name":"v0.42.2","sha":"c0b547bdb239f00ef43b7f69a61813b710d0b221","kind":"commit","published_at":"2022-03-22T17:19:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.2/manifests"},{"name":"v0.42.1","sha":"283db88dc4d40502219c80af36d073b2f1556007","kind":"commit","published_at":"2022-03-21T18:59:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.1/manifests"},{"name":"v0.42.0","sha":"f4734d28b391800f824a89712897daf19237812c","kind":"commit","published_at":"2022-03-17T14:22:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.0/manifests"},{"name":"v0.41.6","sha":"ee0a1d172c0c6f0da907694b9b48870b33d2852d","kind":"commit","published_at":"2022-03-16T13:10:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.6/manifests"},{"name":"v0.41.5","sha":"b9b3ccecf9438f35977f8e8c6187bd616630640b","kind":"commit","published_at":"2022-03-15T17:02:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.5/manifests"},{"name":"v0.41.4","sha":"c7cf8b0b264562b463dd1f8d0ca7a6d1215ef41f","kind":"commit","published_at":"2022-03-11T18:17:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.4/manifests"},{"name":"v0.41.3","sha":"c7cf8b0b264562b463dd1f8d0ca7a6d1215ef41f","kind":"commit","published_at":"2022-03-11T18:17:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.3/manifests"},{"name":"v0.41.2","sha":"7789506dc65830c32f0bbc41e2be657f9fa473cd","kind":"commit","published_at":"2022-03-11T03:38:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.2/manifests"},{"name":"v0.41.1","sha":"07d3c9af52f241613971ccadd18c8f8ab67abc4e","kind":"commit","published_at":"2022-03-08T15:37:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.1/manifests"},{"name":"v0.41.0","sha":"5123f073c7e5b37a87287d5e9e4a01f4611b3eee","kind":"commit","published_at":"2022-03-07T17:37:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.0/manifests"},{"name":"v0.40.1","sha":"b2ab4671b915d50b523ae77b85e9554e5f8bcf95","kind":"commit","published_at":"2022-03-03T22:13:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.40.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.40.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.40.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.1/manifests"},{"name":"v0.40.0","sha":"1e75cb0418df15f8bc8193b1b8a3b3a8d81cb3b0","kind":"commit","published_at":"2022-03-02T15:09:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.40.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.40.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.40.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.0/manifests"},{"name":"v0.39.3","sha":"1d1a7de31457b0f2974090101cb793ee78eeb9b7","kind":"commit","published_at":"2022-02-26T12:30:38.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.3/manifests"},{"name":"v0.39.2","sha":"24cd39089a82abae50195ab9ea3f7be0ef6a2d51","kind":"commit","published_at":"2022-02-26T01:07:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.2/manifests"},{"name":"v0.39.1","sha":"c89131bcf3851505c2ff5f7ca3ae66b1b6a725d4","kind":"commit","published_at":"2022-02-25T16:32:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.1/manifests"},{"name":"v0.39.0","sha":"6c306efed2811c0c78b599355c82f937fe7a251d","kind":"commit","published_at":"2022-02-24T16:15:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.0/manifests"},{"name":"v0.38.0","sha":"52d2e62cdcc08967ead746820346766e12698488","kind":"commit","published_at":"2022-02-15T17:51:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.38.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.38.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.38.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.38.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.38.0/manifests"},{"name":"v0.37.10","sha":"0ed284212305c76d65687aad6eaabf91142e0ddc","kind":"commit","published_at":"2022-02-07T23:47:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.10","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.10/manifests"},{"name":"v0.37.9","sha":"b78c90d0186c959629722d30fb1ca7c6d27faadb","kind":"commit","published_at":"2022-02-07T22:50:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.9","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.9/manifests"},{"name":"v0.37.8","sha":"2c62651c8279f288d9668039da4a865e9a5d0b2a","kind":"commit","published_at":"2022-02-07T21:55:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.8","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.8/manifests"},{"name":"v0.37.7","sha":"5519a25035e6c6ad46bb4c37ef4e174d1060a257","kind":"commit","published_at":"2022-02-07T17:03:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.7","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.7/manifests"},{"name":"v0.37.6","sha":"950ad681a03a5f6924388f92edcf638b87576992","kind":"commit","published_at":"2022-02-07T15:55:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.6/manifests"},{"name":"v0.37.5","sha":"e474b2f23c1e42d274af511333e0d06b879b169d","kind":"commit","published_at":"2022-02-05T15:23:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.5/manifests"},{"name":"v0.37.4","sha":"e7bef5e511c94940c46bba9a4193dacc7c9e97c5","kind":"commit","published_at":"2022-02-04T21:49:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.4/manifests"},{"name":"v0.37.3","sha":"e4ac7700dd76b9cf30778ef40e9acfd3168dcaeb","kind":"commit","published_at":"2022-02-04T19:44:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.3/manifests"},{"name":"v0.37.2","sha":"d3469801fc1e3eae117049064f751689c64bc8bc","kind":"commit","published_at":"2022-02-04T19:04:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.2/manifests"},{"name":"v0.37.1","sha":"3f50bb8fa74436f36202b2582f02be7f91644ab5","kind":"commit","published_at":"2022-02-04T18:23:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.1/manifests"},{"name":"v0.37.0","sha":"341288ba29d66d36afe80f2a7d8eb9b1e53d0a5a","kind":"commit","published_at":"2022-02-04T17:41:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.0/manifests"},{"name":"v0.36.0","sha":"aebe843c6f0307d5c263c25257caf3e6ea827c78","kind":"commit","published_at":"2022-01-19T16:43:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.36.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.36.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.36.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.36.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.36.0/manifests"},{"name":"v0.35.1","sha":"b77ddfc29c2d93dbc61c25b8f0e726c0e238f43b","kind":"commit","published_at":"2022-01-10T18:40:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.35.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.35.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.35.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.1/manifests"},{"name":"v0.35.0","sha":"5e5312c72ddd4b3d4d6200a5e74e78a6d76aa0c7","kind":"commit","published_at":"2022-01-06T22:52:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.35.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.35.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.35.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.0/manifests"},{"name":"v0.34.0","sha":"7f8cb0bd8068709982ef23e931e1ceaa2dfac955","kind":"commit","published_at":"2021-12-22T20:55:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.34.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.34.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.34.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.34.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.34.0/manifests"},{"name":"v0.33.0","sha":"a27907659d6c43f5bef2f76a9e381f2bf697a64f","kind":"commit","published_at":"2021-12-16T13:55:53.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.33.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.33.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.33.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.33.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.33.0/manifests"},{"name":"v0.32.2","sha":"727b84ce0da67a35899e966eb4408b3e6553ed63","kind":"commit","published_at":"2021-12-14T17:17:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.32.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.2/manifests"},{"name":"v0.32.1","sha":"d3804d1a827c9b1fa9867208de1167a9e62c6e99","kind":"commit","published_at":"2021-12-14T01:49:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.32.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.1/manifests"},{"name":"v0.32.0","sha":"da0b17b719b6d5cabe0819d44f90755c73312de8","kind":"commit","published_at":"2021-12-08T21:25:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.32.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.0/manifests"},{"name":"v0.31.0","sha":"22c4b275e73d70807fca8017d4896d8398b3373f","kind":"commit","published_at":"2021-12-03T16:12:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.31.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.31.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.31.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.31.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.31.0/manifests"},{"name":"v0.30.1","sha":"45ea4177e8a37a56798bacf89c4b6cdd5d056d6e","kind":"commit","published_at":"2021-11-15T19:41:46.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.30.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.30.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.30.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.30.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.30.1/manifests"},{"name":"v0.29.0","sha":"a2882ee810edcbf4db3230e982c316b261eb17cd","kind":"commit","published_at":"2021-10-29T16:00:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.29.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.29.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.29.0/manifests"},{"name":"v0.28.0","sha":"3286a4d4cc88e02e81db4f07d21a9fc6edac2a01","kind":"commit","published_at":"2021-10-28T19:41:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.28.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.28.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.28.0/manifests"},{"name":"v0.27.0","sha":"89242e6ed32528132ac79635a856b7a04a77014f","kind":"commit","published_at":"2021-10-21T18:34:17.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.27.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.27.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.27.0/manifests"},{"name":"v0.26.0","sha":"7a005fec0698a405a618242557e03ceebe1ee650","kind":"commit","published_at":"2021-10-15T17:26:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.26.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.26.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.26.0/manifests"},{"name":"v0.25.0","sha":"b25f5b664b21837aee9130d2e63812431bc64a40","kind":"commit","published_at":"2021-10-07T19:18:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.25.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.25.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.25.0/manifests"},{"name":"v0.24.1","sha":"0395c4744581a3d33bf80656f092b19dd75b32fb","kind":"commit","published_at":"2021-09-27T22:31:59.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.24.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.24.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.24.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.1/manifests"},{"name":"v0.24.0","sha":"6d4d083acccc68455e09dd45a474b3f6b5215006","kind":"commit","published_at":"2021-09-23T00:55:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.24.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.24.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.0/manifests"},{"name":"v0.23.0","sha":"ddfc8e20c0f370d25e7d032b23bef2e3d519506c","kind":"commit","published_at":"2021-09-13T17:06:23.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.23.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.23.0/manifests"},{"name":"v0.22.0","sha":"06dcd3261dadf77ec0d86e7a981eb4aac7008d09","kind":"commit","published_at":"2021-09-03T21:29:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.22.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.22.0/manifests"},{"name":"v0.21.0","sha":"ff828fbac211e1d9e993c309461bd9e0636fc2ec","kind":"commit","published_at":"2021-08-20T17:50:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.21.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.21.0/manifests"},{"name":"v0.20.0","sha":"b0e9b92a257f920bf6b31438a1dba6762fa7390d","kind":"commit","published_at":"2021-08-18T15:00:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.20.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.20.0/manifests"},{"name":"v0.19.1","sha":"fee35dd1753308fc887da744de5d0c66947c7493","kind":"commit","published_at":"2021-06-30T17:10:00.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.19.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.1/manifests"},{"name":"v0.19.0","sha":"2de56c074917b159fdd76fc6b1da974b4c53ca2e","kind":"commit","published_at":"2021-06-29T22:16:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.19.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.0/manifests"},{"name":"v0.18.0","sha":"962e82297c329f728018335858ad619ef3e00648","kind":"commit","published_at":"2021-06-29T18:28:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.18.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.18.0/manifests"},{"name":"v0.17.1","sha":"6dd698d89edee65fdcb7c0b2630b6253ed34deba","kind":"commit","published_at":"2021-06-19T18:32:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.17.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.17.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.17.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.1/manifests"},{"name":"v0.17.0","sha":"801e662633304256a05988c868234a2d0ed5a1ae","kind":"commit","published_at":"2021-06-04T16:50:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.17.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.0/manifests"},{"name":"v0.16.1","sha":"8be0d988e7e793d62afd2e9e2a881428322329cb","kind":"commit","published_at":"2021-05-25T21:13:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.16.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.1/manifests"},{"name":"v0.16.0","sha":"80e23bdb506835cdfe26780abcfd977363bae015","kind":"commit","published_at":"2021-05-25T19:01:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.16.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.0/manifests"},{"name":"v0.15.2","sha":"baa859d2ed084eb7c3d5621a255ad6f277533276","kind":"commit","published_at":"2021-05-12T21:28:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.2/manifests"},{"name":"v0.15.1","sha":"032cecbe7f19ca6f6f07d80f8dc902530e4c7502","kind":"commit","published_at":"2021-04-22T20:38:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"1632fdd85ebe8692328ce82b8ac3a3849dbdc315","kind":"commit","published_at":"2021-04-22T19:56:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.0/manifests"},{"name":"v0.14.0","sha":"26a4dd36a8932c7867fcdd6296f50643be30f8a6","kind":"commit","published_at":"2021-03-20T16:23:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.14.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.14.0/manifests"},{"name":"v0.13.1","sha":"40e9c4b146b2cf52112619969f18453ce7fa3234","kind":"commit","published_at":"2021-02-26T20:59:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.13.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.13.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.1/manifests"},{"name":"v0.13.0","sha":"6d5ff0fd8e7c39c95d30c960c8ae6e95b91cd9d0","kind":"commit","published_at":"2021-02-25T18:47:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.13.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.0/manifests"},{"name":"v0.12.7","sha":"c5e3b631ac354a6b22d912c6ed8972a433b02eae","kind":"commit","published_at":"2021-02-17T13:14:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.7","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.7/manifests"},{"name":"v0.12.6","sha":"8d838b18a85d2c2f0ee976cf2af491913dbcf98b","kind":"commit","published_at":"2021-02-05T16:26:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.6/manifests"},{"name":"v0.12.5","sha":"b22fd987db989debd8e880e7dfe934d39fd016f3","kind":"commit","published_at":"2021-02-01T17:03:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.5/manifests"},{"name":"v0.12.4","sha":"407769e88cdb5232b72aa573d9643e6624b92743","kind":"commit","published_at":"2021-01-27T16:51:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.4/manifests"},{"name":"v0.12.3","sha":"7bcdafe745a58592552393f8cb32f2d58982aa21","kind":"commit","published_at":"2021-01-22T21:10:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.3/manifests"},{"name":"v0.12.2","sha":"0f6288881bf8db287e07576bf8dd067184745759","kind":"commit","published_at":"2021-01-06T02:32:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.2/manifests"},{"name":"v0.12.1","sha":"bb70b0b43ee794c97266cc352a37804f2068acd2","kind":"commit","published_at":"2021-01-05T00:45:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"37b96a241b043f09f6cfee145c19b425e858f939","kind":"commit","published_at":"2021-01-04T21:50:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.0/manifests"},{"name":"v0.11.1","sha":"e299a5355fffa8a200f7076befeaf4a494d495f7","kind":"commit","published_at":"2020-12-23T18:23:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.11.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.1/manifests"},{"name":"v0.11.0","sha":"6aaf9ee712f41c38eefe17a07a1aa43cac9e7990","kind":"commit","published_at":"2020-12-18T21:59:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.11.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"52bac6e2fd1adb3d8852f0fab6536a81ec037b89","kind":"commit","published_at":"2020-12-10T03:20:53.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.10.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.10.0/manifests"},{"name":"v0.9.2","sha":"f87c59b4eb5d5b1396dcc8ad06a07a0706c4b7c5","kind":"commit","published_at":"2020-12-03T21:32:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.9.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.2/manifests"},{"name":"v0.9.1","sha":"6f9ded60ed144de3e837effdee5d96366441e7d3","kind":"commit","published_at":"2020-12-02T12:50:31.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.1/manifests"},{"name":"v0.9.0","sha":"ae71b8832d16b70b0373a518877d169659f07bd9","kind":"commit","published_at":"2020-11-30T16:37:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"71939557e6164712accfd0f7486ef4a6c8459656","kind":"commit","published_at":"2020-11-17T18:21:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.8.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.8.0/manifests"},{"name":"v0.7.1","sha":"dad1d9691c355c643eb3a7f1be1cadde36d913c7","kind":"commit","published_at":"2020-11-12T14:36:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.7.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"9581a0309b570d38037962598d4c30c8d028aaa2","kind":"commit","published_at":"2020-11-11T20:15:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.7.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"b3098f3423d11fe10ea18138177258f6d837d379","kind":"commit","published_at":"2020-11-09T19:18:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.6.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"ecfc471ce51a2a84ec144263592c223816241c7a","kind":"commit","published_at":"2020-11-04T20:47:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.5.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"773581704c736925a7a5485c18bde3f8129f1238","kind":"commit","published_at":"2020-10-30T19:14:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.5.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"f19cb03aa07891e433b5e2e6faa956bc9de83bcf","kind":"commit","published_at":"2020-10-26T15:19:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.4.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"15e2e32103b9aaf6d816fa2c6d9b9dc94ba8c16b","kind":"commit","published_at":"2020-10-23T15:06:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.4.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"1bf1e643ebb49fac1f2f30c1a13ff8b056dec938","kind":"commit","published_at":"2020-10-15T18:41:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.3.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.3.0/manifests"},{"name":"v0.2.0","sha":"956af57d3b8e23d5c607f486b0b65a760a602aad","kind":"commit","published_at":"2020-10-08T18:37:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.2.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"5adfce19e0abdfb0d2c62c80713b90f681c83bf4","kind":"commit","published_at":"2020-09-29T20:33:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0/manifests"},{"name":"v0.1.0-beta.5","sha":"8b81c87d18da91d2a5c8f10fdfb93ec3e05aa1f6","kind":"commit","published_at":"2020-09-26T02:59:19.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.5/manifests"},{"name":"v0.1.0-beta.4","sha":"676544b6ab7a5b70af7c2d3d2d34b23c50996900","kind":"commit","published_at":"2020-08-10T22:28:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.4/manifests"},{"name":"v0.1.0-beta.3","sha":"2d452bf59e0f44de6051ac3f316c8afafe0a929a","kind":"commit","published_at":"2020-08-10T14:33:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.3/manifests"},{"name":"v0.1.0-beta.2","sha":"06f8355fce7901bf88493323831b235ef068dc4a","kind":"commit","published_at":"2020-07-27T19:13:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.2/manifests"},{"name":"v0.1.0-beta.1","sha":"19eadde9ca03c89f7325b8ff09ba8114abbe4dcf","kind":"commit","published_at":"2020-07-27T13:55:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.1/manifests"}]},"repo_metadata_updated_at":"2026-08-07T23:36:10.544Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":14.60656632613273,"stargazers_count":null,"forks_count":null,"average":7.303283163066365},"purl":"pkg:apk/alpine/syft-bash-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=edge","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-bash-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-bash-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-bash-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-22T11:00:46.375Z","issues_count":731,"pull_requests_count":2255,"avg_time_to_close_issue":13448535.886297377,"avg_time_to_close_pull_request":877371.7434279706,"issues_closed_count":343,"pull_requests_closed_count":1902,"pull_request_authors_count":150,"issue_authors_count":381,"avg_comments_per_issue":2.1299589603283176,"avg_comments_per_pull_request":0.5197339246119734,"merged_pull_requests_count":1710,"bot_issues_count":11,"bot_pull_requests_count":1193,"past_year_issues_count":194,"past_year_pull_requests_count":931,"past_year_avg_time_to_close_issue":1820259.3389830508,"past_year_avg_time_to_close_pull_request":292805.3951612903,"past_year_issues_closed_count":59,"past_year_pull_requests_closed_count":744,"past_year_pull_request_authors_count":63,"past_year_issue_authors_count":127,"past_year_avg_comments_per_issue":0.9536082474226805,"past_year_avg_comments_per_pull_request":0.32438238453276047,"past_year_bot_issues_count":7,"past_year_bot_pull_requests_count":593,"past_year_merged_pull_requests_count":666,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft-bash-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft-bash-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft-bash-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft-bash-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft-bash-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft-bash-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":"michal@polanski.me","url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":478,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2023-04-01T19:50:44.672Z","updated_at":"2023-04-01T19:50:44.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-edge","url":"https://pkgs.alpinelinux.org/packages?branch=edge","ecosystem":"alpine","default":false,"packages_count":39886,"maintainers_count":902,"namespaces_count":3,"keywords_count":6588,"github":"alpinelinux","metadata":{"repos":["main","community","testing"],"funded_packages_count":2846},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.616Z","updated_at":"2026-08-10T05:07:40.402Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/namespaces"}},{"id":7782069,"name":"syft-bash-completion","ecosystem":"alpine","description":"Bash completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":7,"first_release_published_at":"2023-05-07T11:41:18.000Z","latest_release_published_at":"2023-11-17T20:59:57.000Z","latest_release_number":"0.84.1-r4","last_synced_at":"2026-04-17T13:05:03.096Z","created_at":"2023-05-22T15:00:50.346Z","updated_at":"2026-08-07T23:36:13.558Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.18/community/x86_64/syft-bash-completion","install_command":"apk add syft-bash-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2025-10-20T14:22:16.000Z","size":23003,"stargazers_count":7796,"open_issues_count":500,"forks_count":720,"subscribers_count":62,"default_branch":"main","last_synced_at":"2025-10-20T16:13:38.101Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2025-10-20T14:24:07.000Z","dependencies_parsed_at":"2023-12-20T09:43:51.606Z","dependency_job_id":"3d1fd421-c43b-4d60-87a0-71ec0266d70f","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":240,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":280449175,"owners_count":26332601,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-22T02:00:06.515Z","response_time":63,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"anchore","name":"Anchore, Inc.","uuid":"16208487","kind":"organization","description":"","email":"info@anchore.com","website":"https://anchore.com/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16208487?v=4","repositories_count":43,"last_synced_at":"2023-03-02T09:35:13.089Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/anchore","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-13T02:25:02.273Z","updated_at":"2023-03-02T09:35:13.093Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore/repositories"},"tags":[{"name":"v1.34.2","sha":"0c98a364d503789ff8d7f122763bb8748de9772f","kind":"tag","published_at":"2025-10-16T12:19:26.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.34.2","html_url":"https://github.com/anchore/syft/releases/tag/v1.34.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.34.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.2/manifests"},{"name":"v1.34.1","sha":"e9a8bc5ab97f94b7f9210d7a0f4a981cdbb22232","kind":"tag","published_at":"2025-10-15T15:27:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.34.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.34.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.34.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.1/manifests"},{"name":"v1.34.0","sha":"6d790ec6ec98b263dae0c54259859b35c3527e1b","kind":"tag","published_at":"2025-10-14T22:25:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.34.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.34.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.34.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.34.0/manifests"},{"name":"v1.33.0","sha":"b87b9191497c2d410b42c05591347d428129fd2a","kind":"tag","published_at":"2025-09-15T20:38:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.33.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.33.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.33.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.33.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.33.0/manifests"},{"name":"v1.32.0","sha":"2d8e337d3469712c7d92770792f0117ad82c4ad3","kind":"tag","published_at":"2025-08-26T21:47:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.32.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.32.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.32.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.32.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.32.0/manifests"},{"name":"v1.31.0","sha":"ab9db0024ed35ab6a4e33e539593f5a3c58a5594","kind":"tag","published_at":"2025-08-13T14:50:45.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.31.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.31.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.31.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.31.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.31.0/manifests"},{"name":"v1.30.0","sha":"49736e7c4acd3cb1aed2d3a8c8cdcd696ac77166","kind":"tag","published_at":"2025-08-08T18:21:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.30.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.30.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.30.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.30.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.30.0/manifests"},{"name":"v1.29.1","sha":"386ef842d99a72027fb5fd1085fde87883640eaf","kind":"tag","published_at":"2025-07-30T18:16:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.29.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.29.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.29.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.1/manifests"},{"name":"v1.29.0","sha":"6f36b586ba1cc49074573d07ca397d18e9eecd16","kind":"tag","published_at":"2025-07-21T19:36:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.29.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.29.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.29.0/manifests"},{"name":"v1.28.0","sha":"e8b62ab9aca2e896ab608c118619c5a7831bc737","kind":"tag","published_at":"2025-07-02T16:25:07.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.28.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.28.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.28.0/manifests"},{"name":"v1.27.1","sha":"10f06317104361183b4cb803c0e6ac1727257551","kind":"tag","published_at":"2025-06-12T13:39:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.27.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.27.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.27.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.1/manifests"},{"name":"v1.27.0","sha":"18f9b5ab58aa04dda61a3eed8123bd89470befe9","kind":"tag","published_at":"2025-06-09T18:36:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.27.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.27.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.27.0/manifests"},{"name":"v1.26.1","sha":"7bfb4c86a6d7e5343c45c2844a232b6c7ba4c51c","kind":"tag","published_at":"2025-05-22T12:36:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.26.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.26.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.26.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.1/manifests"},{"name":"v1.26.0","sha":"ac883f52edb8ca1f5a0a61d12c288d4b34ea3897","kind":"tag","published_at":"2025-05-20T21:27:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.26.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.26.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.26.0/manifests"},{"name":"v1.25.1","sha":"db77b54c019c9aae142d13ca642ddb56d0deefa6","kind":"tag","published_at":"2025-05-16T18:53:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.25.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.25.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.25.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.1/manifests"},{"name":"v1.25.0","sha":"2d4fe513ecec7af9626b9dada586c7a0ff63a67d","kind":"tag","published_at":"2025-05-16T16:29:38.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.25.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.25.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.25.0/manifests"},{"name":"v1.24.0","sha":"3c7018a853ab7b311db9ff70e1cf3113b46d9c0c","kind":"tag","published_at":"2025-05-14T14:51:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.24.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.24.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.24.0/manifests"},{"name":"v1.23.1","sha":"a714fb8391471c6ddf6e583229d982d1316d64a8","kind":"tag","published_at":"2025-04-25T14:52:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.23.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.23.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.23.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.1/manifests"},{"name":"v1.23.0","sha":"4211d796672ab21250a4d6fd8e45204d6dc00d0e","kind":"tag","published_at":"2025-04-24T20:16:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.23.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.23.0/manifests"},{"name":"v1.22.0","sha":"9ab83874ed21c07479d8eeddd88a6894e1ff8537","kind":"tag","published_at":"2025-04-01T14:37:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.22.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.22.0/manifests"},{"name":"v1.21.0","sha":"7bdbfc04781a18827c30a505d64a8671c9827bd7","kind":"tag","published_at":"2025-03-17T18:52:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.21.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.21.0/manifests"},{"name":"v1.20.0","sha":"46522bcc5dff8b65b61a7cda1393abe515802306","kind":"tag","published_at":"2025-02-21T20:44:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.20.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.20.0/manifests"},{"name":"v1.19.0","sha":"222e6548a96f8c80015c1d24f01dea3052a04893","kind":"tag","published_at":"2025-01-22T19:57:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.19.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.19.0/manifests"},{"name":"v1.18.1","sha":"5e16e5031a13f8a11057feb8544decebfc43b4ed","kind":"tag","published_at":"2024-12-13T18:41:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.18.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.18.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.18.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.1/manifests"},{"name":"v1.18.0","sha":"d38efb0b7fb7106909bc532a4efc68b78a917a34","kind":"tag","published_at":"2024-12-09T21:02:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.18.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.18.0/manifests"},{"name":"v1.17.0","sha":"a8d4202d77b6b31e75ce5af09a8b03ad14e533d3","kind":"tag","published_at":"2024-11-21T14:39:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.17.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.17.0/manifests"},{"name":"v1.16.0","sha":"8a41d772509d37267a65e0b425808e883e4b9dce","kind":"tag","published_at":"2024-11-04T22:29:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.16.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.16.0/manifests"},{"name":"v1.15.0","sha":"55cc1877ef246d8cabfd9bbeb0a8747b59c03431","kind":"tag","published_at":"2024-10-28T21:11:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.15.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.15.0/manifests"},{"name":"v1.14.2","sha":"e4e985b9b05b9570648399adf292ab7f659b4cef","kind":"tag","published_at":"2024-10-21T17:20:27.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.14.2","html_url":"https://github.com/anchore/syft/releases/tag/v1.14.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.14.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.2/manifests"},{"name":"v1.14.1","sha":"754cebee6414c614acf03ee0f87abfcf6176e051","kind":"tag","published_at":"2024-10-15T13:04:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.14.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.14.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.14.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.1/manifests"},{"name":"v1.14.0","sha":"ccbee94b876240284c25c8931c6233fc71a5b7fb","kind":"tag","published_at":"2024-10-07T20:40:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.14.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.14.0/manifests"},{"name":"v1.13.0","sha":"01de99b25304ec95197c00b21d698f127b31a887","kind":"tag","published_at":"2024-09-24T13:28:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.13.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.13.0/manifests"},{"name":"v1.12.2","sha":"fcd5ec951de6b3fc1f1aa2a36968356d2eb22170","kind":"tag","published_at":"2024-09-11T14:12:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.12.2","html_url":"https://github.com/anchore/syft/releases/tag/v1.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.2/manifests"},{"name":"v1.12.1","sha":"c33a51d3d839ba619ea2217ee00a56be23f9fb9f","kind":"tag","published_at":"2024-09-10T20:42:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.12.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.1/manifests"},{"name":"v1.12.0","sha":"dbc4238f63c027efc09ce5fe51e069c1145f6846","kind":"tag","published_at":"2024-09-10T17:37:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.12.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.12.0/manifests"},{"name":"v1.11.1","sha":"95b4a88256bddebb91831250f28f602f8c36552a","kind":"tag","published_at":"2024-08-20T16:25:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.11.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.1/manifests"},{"name":"v1.11.0","sha":"19cc664cf8e7020dd692a62efcbba98ab670bde9","kind":"tag","published_at":"2024-08-09T17:52:21.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.11.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.11.0/manifests"},{"name":"v1.10.0","sha":"a4b5dcd0df80f6a58c8610e25104647710c1da5d","kind":"tag","published_at":"2024-07-30T16:13:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.10.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.10.0/manifests"},{"name":"v1.9.0","sha":"4e09908ba124dca7e6f1f6e7dc4f4663fae658ca","kind":"tag","published_at":"2024-07-11T17:32:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.9.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.9.0/manifests"},{"name":"v1.8.0","sha":"1eae9333a9450c135ff929578597c79b01c9f5ff","kind":"tag","published_at":"2024-06-24T15:43:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.8.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.8.0/manifests"},{"name":"v1.7.0","sha":"22d57314826fce1bff469d8173884489f8212925","kind":"tag","published_at":"2024-06-14T19:48:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.7.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.7.0/manifests"},{"name":"v1.6.0","sha":"c43f4fb416c34c1c4b3997373689d8d4c0fb9b36","kind":"tag","published_at":"2024-06-10T15:39:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.6.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.6.0/manifests"},{"name":"v1.5.0","sha":"ac34808b9c55bb274b1205f9b5d9cf495239577d","kind":"tag","published_at":"2024-05-28T15:11:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.5.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.5.0/manifests"},{"name":"v1.4.1","sha":"c200896a9644f9b6bd4bc3785c848276c33bb53c","kind":"tag","published_at":"2024-05-09T19:45:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.4.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.1/manifests"},{"name":"v1.4.0","sha":"4194a2cd34d2f15dd9a96774ba2fbc5463db4c58","kind":"tag","published_at":"2024-05-09T18:14:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.4.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"87cd6c8c48239a20c413f6461e90000ff30ee601","kind":"tag","published_at":"2024-04-26T15:01:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.3.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"dde5d349b1eef740c285255e6a9e3a8f5c9938e1","kind":"tag","published_at":"2024-04-12T18:31:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.2.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.2.0/manifests"},{"name":"v1.1.1","sha":"1e31356c49bf2c30fd80c833482e1fbe4133ff83","kind":"tag","published_at":"2024-04-04T14:52:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.1.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"f4e18961b979f5e6d0cc3b1e4fce608c8ceb29d8","kind":"tag","published_at":"2024-03-25T21:41:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.1.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"1b121ac3f4d589060ddf1fac0bcd6871ea4731e3","kind":"tag","published_at":"2024-03-06T19:51:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.0.1","html_url":"https://github.com/anchore/syft/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"356f7c92b464b69be3a2a898cd98a63037eeadcc","kind":"tag","published_at":"2024-02-29T14:50:50.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v1.0.0","html_url":"https://github.com/anchore/syft/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v1.0.0/manifests"},{"name":"v0.105.1","sha":"928511ea0f1449e057e8057e38743d258b22476b","kind":"tag","published_at":"2024-02-26T16:52:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.105.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.105.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.105.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.1/manifests"},{"name":"v0.105.0","sha":"65cadda48653d2452a7e41a47a60d2934e8fcb07","kind":"tag","published_at":"2024-02-14T21:16:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.105.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.105.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.105.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.105.0/manifests"},{"name":"v0.104.0","sha":"bd0cb916df4376a06e56ef7f3cc0da6659d7c2c6","kind":"tag","published_at":"2024-02-07T20:51:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.104.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.104.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.104.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.104.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.104.0/manifests"},{"name":"v0.103.1","sha":"377538e4a692b8070716eb091456b112ccc2cb81","kind":"tag","published_at":"2024-01-31T17:09:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.103.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.103.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.103.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.1/manifests"},{"name":"v0.103.0","sha":"bbe7fa180a38079318fd4a75d6276720374ccecd","kind":"tag","published_at":"2024-01-31T16:34:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.103.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.103.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.103.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.103.0/manifests"},{"name":"v0.102.0","sha":"d7c51e5c82de8b64b992f5962842c20903b5934a","kind":"tag","published_at":"2024-01-26T14:34:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.102.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.102.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.102.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.102.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.102.0/manifests"},{"name":"v0.101.1","sha":"3eab5932e5271eea5506ab9710239b1415c827f8","kind":"tag","published_at":"2024-01-19T22:02:00.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.101.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.101.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.101.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.1/manifests"},{"name":"v0.101.0","sha":"297ece69045d6d73a184ed955a99d90769b1cb45","kind":"tag","published_at":"2024-01-17T20:41:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.101.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.101.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.101.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.101.0/manifests"},{"name":"v0.100.0","sha":"a16a4ad6c993aaaa1ec502667c215b0e8c8e51ff","kind":"tag","published_at":"2024-01-05T21:33:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.100.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.100.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.100.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.100.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.100.0/manifests"},{"name":"v0.99.0","sha":"3cffa0b7fd276a35123c48e45407c4f402f2c58f","kind":"tag","published_at":"2023-12-21T16:18:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.99.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.99.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.99.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.99.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.99.0/manifests"},{"name":"v0.98.0","sha":"5c8dd4c3a7632dcfd999bab7a5b73c3180f1b628","kind":"tag","published_at":"2023-11-29T14:52:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.98.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.98.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.98.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.98.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.98.0/manifests"},{"name":"v0.97.1","sha":"7cfb5f630a7a2105d49d65eaaaa2e2c06e4eda73","kind":"tag","published_at":"2023-11-17T21:03:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.97.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.97.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.97.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.1/manifests"},{"name":"v0.97.0","sha":"1c787f436fca20cbec4541f978ed2a634b880c97","kind":"tag","published_at":"2023-11-16T22:56:21.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.97.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.97.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.97.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.97.0/manifests"},{"name":"v0.96.0","sha":"0891d35e0774f175e3a3f170edcce9ad2f4f015b","kind":"tag","published_at":"2023-11-09T14:04:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.96.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.96.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.96.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.96.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.96.0/manifests"},{"name":"v0.95.0","sha":"9b98785aab9346999a0b5e9f5e4b4e63a1b1916c","kind":"tag","published_at":"2023-11-07T16:43:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.95.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.95.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.95.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.95.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.95.0/manifests"},{"name":"v0.94.0","sha":"8f6bdde6662aa8050a71eadbdb7bd5a3b079a56d","kind":"tag","published_at":"2023-10-20T17:21:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.94.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.94.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.94.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.94.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.94.0/manifests"},{"name":"v0.93.0","sha":"0748945c8341a06415ac80e624b84e8d3f548d39","kind":"tag","published_at":"2023-10-10T17:27:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.93.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.93.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.93.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.93.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.93.0/manifests"},{"name":"v0.92.0","sha":"8f57d22f639e132cbd87324abacd864232c611ce","kind":"tag","published_at":"2023-09-27T15:40:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.92.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.92.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.92.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.92.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.92.0/manifests"},{"name":"v0.91.0","sha":"b7fa75d7f82a6816d307805ac07e6965c799e938","kind":"tag","published_at":"2023-09-20T19:41:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.91.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.91.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.91.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.91.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.91.0/manifests"},{"name":"v0.90.0","sha":"b82c0ffc3417bdc8c38f4633af95a668ec29fa35","kind":"commit","published_at":"2023-09-11T16:12:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.90.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.90.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.90.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.90.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.90.0/manifests"},{"name":"v0.89.0","sha":"b454160549bbd199e0a5693750856f30b41767f7","kind":"commit","published_at":"2023-08-31T14:50:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.89.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.89.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.89.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.89.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.89.0/manifests"},{"name":"v0.88.0","sha":"dd09e0362e46bee7285e0fca5ed96e398c314380","kind":"commit","published_at":"2023-08-25T20:45:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.88.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.88.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.88.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.88.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.88.0/manifests"},{"name":"v0.87.1","sha":"4762ba0943785fe778276893388e839e01787b45","kind":"commit","published_at":"2023-08-17T16:55:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.87.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.87.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.87.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.1/manifests"},{"name":"v0.87.0","sha":"b3d7ba569b64376cf33df717e3bc40d8375e033b","kind":"commit","published_at":"2023-08-14T15:37:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.87.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.87.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.87.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.87.0/manifests"},{"name":"v0.86.1","sha":"e2f7befbfbf88053dfb2007c6499a4bb2d232c3c","kind":"commit","published_at":"2023-07-31T17:29:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.86.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.86.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.86.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.1/manifests"},{"name":"v0.86.0","sha":"f14742b3f3a6f8cd4bc696dbafee53ab1d665da7","kind":"commit","published_at":"2023-07-31T16:02:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.86.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.86.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.86.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.86.0/manifests"},{"name":"v0.85.0","sha":"4fc17edd146af34ab06f5b0443ef8ddac3aaf076","kind":"commit","published_at":"2023-07-12T17:14:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.85.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.85.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.85.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.85.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.85.0/manifests"},{"name":"v0.84.1","sha":"791d1f955215f1dad383c9835e4d3c01267dc0f5","kind":"commit","published_at":"2023-06-28T16:05:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.84.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.84.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.84.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.1/manifests"},{"name":"v0.84.0","sha":"5d54e6e847192f63db80c9a7ee23197476c632ce","kind":"commit","published_at":"2023-06-20T16:08:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.84.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.84.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.84.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.84.0/manifests"},{"name":"v0.83.1","sha":"a1bba36d514c3ff0f34635b9cdc9f07a92ea793b","kind":"commit","published_at":"2023-06-14T15:45:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.83.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.83.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.83.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.1/manifests"},{"name":"v0.83.0","sha":"1764e1c3f6bd66781f8350d957a1f95e4d9ad3de","kind":"commit","published_at":"2023-06-05T19:04:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.83.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.83.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.83.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.83.0/manifests"},{"name":"v0.82.0","sha":"4ac8fdf6df0da4cd6f76820dbec9f490ee56bcba","kind":"commit","published_at":"2023-05-23T16:58:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.82.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.82.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.82.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.82.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.82.0/manifests"},{"name":"v0.81.0","sha":"334a775cb9cd6bf50033de1bb3aa04f46b669f5d","kind":"commit","published_at":"2023-05-19T14:21:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.81.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.81.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.81.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.81.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.81.0/manifests"},{"name":"v0.80.0","sha":"0f1aed447751f92dcc0165b56aa474ec9706805e","kind":"commit","published_at":"2023-05-05T15:41:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.80.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.80.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.80.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.80.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.80.0/manifests"},{"name":"v0.79.0","sha":"b2b332e8b2b66af0905e98b54ebd713a922be1a8","kind":"commit","published_at":"2023-04-21T13:34:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.79.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.79.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.79.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.79.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.79.0/manifests"},{"name":"v0.78.0","sha":"244b797a199458f504758c0e3a775572a021e629","kind":"commit","published_at":"2023-04-17T16:26:07.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.78.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.78.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.78.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.78.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.78.0/manifests"},{"name":"v0.77.0","sha":"dd30c99bc2439cb91e3d084eb21e1040dd5a54dc","kind":"commit","published_at":"2023-04-11T14:13:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.77.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.77.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.77.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.77.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.77.0/manifests"},{"name":"v0.76.1","sha":"7845381331e873f65fd5013f44b7d85168ced5f5","kind":"commit","published_at":"2023-04-05T17:59:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.76.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.76.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.76.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.1/manifests"},{"name":"v0.76.0","sha":"dfcc07e5122217ca9e2fc75817c593356fc0c405","kind":"commit","published_at":"2023-03-31T14:04:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.76.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.76.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.76.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.76.0/manifests"},{"name":"v0.75.0","sha":"cc0a376aba43e7f9c5fe66320643f72088533838","kind":"commit","published_at":"2023-03-13T17:26:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.75.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.75.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.75.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.75.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.75.0/manifests"},{"name":"v0.74.1","sha":"41cbbe09b205e3b80e8a57d4f7a509b5f938557d","kind":"commit","published_at":"2023-03-07T17:54:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.74.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.74.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.74.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.1/manifests"},{"name":"v0.74.0","sha":"5f90d0371873faf5eb8f2e748909b32294be6263","kind":"commit","published_at":"2023-03-01T20:35:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.74.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.74.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.74.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.74.0/manifests"},{"name":"v0.72.1","sha":"be71f7c6aea3fd663e0f059df1d8060c2f6e916d","kind":"commit","published_at":"2023-02-22T21:34:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.72.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.72.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.72.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.1/manifests"},{"name":"v0.73.0","sha":"aa151da5fe2a1b11502c852fd2d3ad462c1d245f","kind":"commit","published_at":"2023-02-22T19:08:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.73.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.73.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.73.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.73.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.73.0/manifests"},{"name":"v0.72.0","sha":"2642a3616170ccbda9d8c8cb4f4a6b0fd5c63da9","kind":"commit","published_at":"2023-02-16T15:22:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.72.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.72.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.72.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.72.0/manifests"},{"name":"v0.71.0","sha":"88c81d33edc67b0b9636d0046417a9373ac8b74f","kind":"commit","published_at":"2023-02-09T16:35:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.71.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.71.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.71.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.71.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.71.0/manifests"},{"name":"v0.70.0","sha":"9995950c70e849f9921919faffbfcf46401f71f3","kind":"commit","published_at":"2023-02-03T18:06:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.70.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.70.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.70.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.70.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.70.0/manifests"},{"name":"v0.69.1","sha":"1530ef354ffaf59cef6a02c949f2cdb82353954f","kind":"commit","published_at":"2023-01-31T16:53:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.69.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.69.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.69.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.1/manifests"},{"name":"v0.69.0","sha":"b81c9805dcc9bf25dad7659fd9c2bbf7dd3f3d90","kind":"commit","published_at":"2023-01-30T18:47:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.69.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.69.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.69.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.69.0/manifests"},{"name":"v0.68.1","sha":"4c0aef09b8d7fb78200b04416f474b90b79370de","kind":"commit","published_at":"2023-01-25T17:18:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.68.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.68.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.68.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.1/manifests"},{"name":"v0.68.0","sha":"e58050bac045be672621047d5699b88884e2da62","kind":"commit","published_at":"2023-01-20T14:49:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.68.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.68.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.68.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.68.0/manifests"},{"name":"v0.66.2","sha":"03971ace43b877e371c13e3f786c1f6c3a4ec507","kind":"commit","published_at":"2023-01-17T21:26:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.66.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.2/manifests"},{"name":"v0.66.1","sha":"ac94bf530c7b1e6ee5df1ed0f9f6454fca8bc918","kind":"commit","published_at":"2023-01-12T22:42:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.66.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.1/manifests"},{"name":"v0.66.0","sha":"260cb4c72d001b63e7462ed214caeb0aab605714","kind":"commit","published_at":"2023-01-12T20:03:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.66.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.66.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.66.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.66.0/manifests"},{"name":"v0.65.0","sha":"bc1edb9c8a2fb4824bfdcac6147edc2bbf47aaf6","kind":"commit","published_at":"2023-01-04T16:34:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.65.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.65.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.65.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.65.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.65.0/manifests"},{"name":"v0.64.0","sha":"e1e489a2849c8432781a7cb58b257fa935efa1cf","kind":"commit","published_at":"2022-12-23T13:37:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.64.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.64.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.64.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.64.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.64.0/manifests"},{"name":"v0.63.0","sha":"23a3173c9f2461e5906d1b9e3ac20b4806d74777","kind":"commit","published_at":"2022-12-12T17:55:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.63.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.63.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.63.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.63.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.63.0/manifests"},{"name":"v0.62.3","sha":"247b054ab56f848c477495218754166272f470b5","kind":"commit","published_at":"2022-11-30T16:11:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.3/manifests"},{"name":"v0.62.2","sha":"0cbd0cc70377d5b1b11b808fbbf9ddec450c68ee","kind":"commit","published_at":"2022-11-28T15:43:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.2/manifests"},{"name":"v0.62.1","sha":"098e61dcc81d7a6d666bc62a2166c9b8f32c61bc","kind":"commit","published_at":"2022-11-21T14:26:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.1/manifests"},{"name":"v0.62.0","sha":"da4b2df57640e03f273a2e7e9b04eca40555e139","kind":"commit","published_at":"2022-11-18T18:42:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.62.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.62.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.62.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.62.0/manifests"},{"name":"v0.61.0","sha":"67888ee855ad37948bfee98e3aa7d592b4f91e95","kind":"commit","published_at":"2022-11-18T14:45:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.61.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.61.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.61.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.61.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.61.0/manifests"},{"name":"v0.60.3","sha":"bc9740d50a38e9660f2f98ed91d84c6d8799cf70","kind":"commit","published_at":"2022-11-03T14:38:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.3/manifests"},{"name":"v0.60.2","sha":"35f0f2931e310882fe7117c41d57a185d72ca498","kind":"commit","published_at":"2022-11-02T14:05:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.2/manifests"},{"name":"v0.60.1","sha":"ba57f3db5189c632ecaa02f9cf0b634c5a55099c","kind":"commit","published_at":"2022-11-01T16:28:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.1/manifests"},{"name":"v0.60.0","sha":"4c5c6f6319d931f324c3a15a88ba2593109cbbe2","kind":"commit","published_at":"2022-11-01T14:30:29.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.60.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.60.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.60.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.60.0/manifests"},{"name":"v0.59.0","sha":"41bc6bb410352845f22766e27dd48ba93aa825a4","kind":"commit","published_at":"2022-10-14T19:54:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.59.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.59.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.59.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.59.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.59.0/manifests"},{"name":"v0.58.0","sha":"b9b13d5525df89194d332467f692bc28bc68d07f","kind":"commit","published_at":"2022-09-29T18:45:59.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.58.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.58.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.58.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.58.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.58.0/manifests"},{"name":"v0.57.0","sha":"04d288b3643f906255af88108f27712bb2be5b63","kind":"commit","published_at":"2022-09-19T20:08:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.57.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.57.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.57.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.57.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.57.0/manifests"},{"name":"v0.56.0","sha":"c5dca001e267d2a91ff82e53ca72535ceef6af02","kind":"commit","published_at":"2022-09-09T18:59:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.56.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.56.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.56.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.56.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.56.0/manifests"},{"name":"v0.55.0","sha":"a7966a4d9d8155be788af33fe5e5af2e40043f82","kind":"commit","published_at":"2022-08-29T19:28:19.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.55.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.55.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.55.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.55.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.55.0/manifests"},{"name":"v0.54.0","sha":"21eb77206020c04c9ca5316562e32179c73926a9","kind":"commit","published_at":"2022-08-16T18:14:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.54.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.54.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.54.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.54.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.54.0/manifests"},{"name":"v0.53.4","sha":"69bde44c6e50a5838cdd2c2c821edb0111013178","kind":"commit","published_at":"2022-08-03T16:24:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.4/manifests"},{"name":"v0.53.3","sha":"042304ee4c614708b4e293f525c5d0a435ede2cf","kind":"commit","published_at":"2022-08-03T13:46:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.3/manifests"},{"name":"v0.53.2","sha":"69fb0a6f3bd6f0281e0d466ab7db23090a3ebc65","kind":"commit","published_at":"2022-08-02T19:25:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.2/manifests"},{"name":"v0.53.1","sha":"f5d02d4e527d3fe1906fd209ce036f58049979f3","kind":"commit","published_at":"2022-08-02T15:44:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.1/manifests"},{"name":"v0.53.0","sha":"b7f587f5dcae631b76d2f80ed2a3b9a207972d80","kind":"commit","published_at":"2022-08-02T13:42:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.53.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.53.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.53.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.53.0/manifests"},{"name":"v0.52.0","sha":"ba9adb17ebb510a2a3bd2b641738b1d9235e1f3e","kind":"commit","published_at":"2022-07-21T13:17:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.52.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.52.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.52.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.52.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.52.0/manifests"},{"name":"v0.51.0","sha":"470b13045bbbf150f3c79d1487a01ae6acc5592d","kind":"commit","published_at":"2022-07-11T14:09:08.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.51.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.51.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.51.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.51.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.51.0/manifests"},{"name":"v0.50.0","sha":"69134ed3b54bc8b1d86d868611f7d069ce3290a8","kind":"commit","published_at":"2022-07-05T15:57:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.50.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.50.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.50.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.50.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.50.0/manifests"},{"name":"v0.49.0","sha":"d5e12ff89c2d3af684152dd401618533a6f1b67e","kind":"commit","published_at":"2022-06-24T15:05:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.49.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.49.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.49.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.49.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.49.0/manifests"},{"name":"v0.48.1","sha":"03e37044d437294b0aac44a4e9277eb8f6c8be3f","kind":"commit","published_at":"2022-06-16T18:56:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.48.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.48.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.48.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.1/manifests"},{"name":"v0.48.0","sha":"9e72771b851f1657ade0c2214569f675cf0813f3","kind":"commit","published_at":"2022-06-16T14:43:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.48.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.48.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.48.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.48.0/manifests"},{"name":"v0.47.0","sha":"f15d4a9984428103a60e2298d0755b3adcc32a3a","kind":"commit","published_at":"2022-06-08T21:39:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.47.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.47.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.47.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.47.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.47.0/manifests"},{"name":"v0.46.3","sha":"7cb8e1fc14a278ec5afce379623a47577aba9917","kind":"commit","published_at":"2022-05-25T21:40:08.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.3/manifests"},{"name":"v0.46.2","sha":"d41afe05eb8fecd2906f5db9661910dbc99fc3dd","kind":"commit","published_at":"2022-05-19T20:10:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.2/manifests"},{"name":"v0.46.1","sha":"03ee4fdf5e87907c5a49ae353c44682894bb411c","kind":"commit","published_at":"2022-05-12T16:56:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.1/manifests"},{"name":"v0.46.0","sha":"91e2fd8532254216a83c80891611751d0c8fba7b","kind":"commit","published_at":"2022-05-11T22:35:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.46.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.46.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.46.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.46.0/manifests"},{"name":"v0.45.1","sha":"37927b8b23cac234289a73aa3e886675d463e477","kind":"commit","published_at":"2022-05-03T13:38:14.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.45.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.45.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.45.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.1/manifests"},{"name":"v0.45.0","sha":"36973021fad57baf443ffa88181394b87ce109a0","kind":"commit","published_at":"2022-04-29T15:18:45.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.45.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.45.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.45.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.45.0/manifests"},{"name":"v0.44.1","sha":"248023baafdf2a74f8bdaf98beaee3f40584bb7d","kind":"commit","published_at":"2022-04-15T17:00:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.44.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.44.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.44.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.1/manifests"},{"name":"v0.44.0","sha":"b46d044d7e3afc2ee09fd5ff26635f783628126e","kind":"commit","published_at":"2022-04-11T18:56:04.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.44.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.44.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.44.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.44.0/manifests"},{"name":"v0.43.2","sha":"e415bb21e7a609c12dc37a2d6395796fb675e3fe","kind":"commit","published_at":"2022-04-06T21:15:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.43.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.2/manifests"},{"name":"v0.43.1","sha":"748cfbf00647df3366ec3c4ad89d87762625da5a","kind":"commit","published_at":"2022-04-06T16:27:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.43.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.1/manifests"},{"name":"v0.43.0","sha":"f24bbc1838351e4e408368f3312c76db6552e71e","kind":"commit","published_at":"2022-03-31T19:45:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.43.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.43.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.43.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.43.0/manifests"},{"name":"v0.42.4","sha":"a7db43f5ec159cad98d0298a2375ee1f4c397894","kind":"commit","published_at":"2022-03-24T14:11:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.4/manifests"},{"name":"v0.42.3","sha":"cc2c0e57a0d02a1719b4e34d0793f09e9699c8b0","kind":"commit","published_at":"2022-03-23T18:34:54.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.3/manifests"},{"name":"v0.42.2","sha":"c0b547bdb239f00ef43b7f69a61813b710d0b221","kind":"commit","published_at":"2022-03-22T17:19:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.2/manifests"},{"name":"v0.42.1","sha":"283db88dc4d40502219c80af36d073b2f1556007","kind":"commit","published_at":"2022-03-21T18:59:10.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.1/manifests"},{"name":"v0.42.0","sha":"f4734d28b391800f824a89712897daf19237812c","kind":"commit","published_at":"2022-03-17T14:22:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.42.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.42.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.42.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.42.0/manifests"},{"name":"v0.41.6","sha":"ee0a1d172c0c6f0da907694b9b48870b33d2852d","kind":"commit","published_at":"2022-03-16T13:10:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.6/manifests"},{"name":"v0.41.5","sha":"b9b3ccecf9438f35977f8e8c6187bd616630640b","kind":"commit","published_at":"2022-03-15T17:02:33.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.5/manifests"},{"name":"v0.41.4","sha":"c7cf8b0b264562b463dd1f8d0ca7a6d1215ef41f","kind":"commit","published_at":"2022-03-11T18:17:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.4/manifests"},{"name":"v0.41.3","sha":"c7cf8b0b264562b463dd1f8d0ca7a6d1215ef41f","kind":"commit","published_at":"2022-03-11T18:17:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.3/manifests"},{"name":"v0.41.2","sha":"7789506dc65830c32f0bbc41e2be657f9fa473cd","kind":"commit","published_at":"2022-03-11T03:38:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.2/manifests"},{"name":"v0.41.1","sha":"07d3c9af52f241613971ccadd18c8f8ab67abc4e","kind":"commit","published_at":"2022-03-08T15:37:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.1/manifests"},{"name":"v0.41.0","sha":"5123f073c7e5b37a87287d5e9e4a01f4611b3eee","kind":"commit","published_at":"2022-03-07T17:37:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.41.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.41.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.41.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.41.0/manifests"},{"name":"v0.40.1","sha":"b2ab4671b915d50b523ae77b85e9554e5f8bcf95","kind":"commit","published_at":"2022-03-03T22:13:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.40.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.40.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.40.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.1/manifests"},{"name":"v0.40.0","sha":"1e75cb0418df15f8bc8193b1b8a3b3a8d81cb3b0","kind":"commit","published_at":"2022-03-02T15:09:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.40.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.40.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.40.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.40.0/manifests"},{"name":"v0.39.3","sha":"1d1a7de31457b0f2974090101cb793ee78eeb9b7","kind":"commit","published_at":"2022-02-26T12:30:38.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.3/manifests"},{"name":"v0.39.2","sha":"24cd39089a82abae50195ab9ea3f7be0ef6a2d51","kind":"commit","published_at":"2022-02-26T01:07:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.2/manifests"},{"name":"v0.39.1","sha":"c89131bcf3851505c2ff5f7ca3ae66b1b6a725d4","kind":"commit","published_at":"2022-02-25T16:32:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.1/manifests"},{"name":"v0.39.0","sha":"6c306efed2811c0c78b599355c82f937fe7a251d","kind":"commit","published_at":"2022-02-24T16:15:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.39.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.39.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.39.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.39.0/manifests"},{"name":"v0.38.0","sha":"52d2e62cdcc08967ead746820346766e12698488","kind":"commit","published_at":"2022-02-15T17:51:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.38.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.38.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.38.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.38.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.38.0/manifests"},{"name":"v0.37.10","sha":"0ed284212305c76d65687aad6eaabf91142e0ddc","kind":"commit","published_at":"2022-02-07T23:47:47.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.10","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.10/manifests"},{"name":"v0.37.9","sha":"b78c90d0186c959629722d30fb1ca7c6d27faadb","kind":"commit","published_at":"2022-02-07T22:50:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.9","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.9/manifests"},{"name":"v0.37.8","sha":"2c62651c8279f288d9668039da4a865e9a5d0b2a","kind":"commit","published_at":"2022-02-07T21:55:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.8","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.8/manifests"},{"name":"v0.37.7","sha":"5519a25035e6c6ad46bb4c37ef4e174d1060a257","kind":"commit","published_at":"2022-02-07T17:03:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.7","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.7/manifests"},{"name":"v0.37.6","sha":"950ad681a03a5f6924388f92edcf638b87576992","kind":"commit","published_at":"2022-02-07T15:55:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.6/manifests"},{"name":"v0.37.5","sha":"e474b2f23c1e42d274af511333e0d06b879b169d","kind":"commit","published_at":"2022-02-05T15:23:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.5/manifests"},{"name":"v0.37.4","sha":"e7bef5e511c94940c46bba9a4193dacc7c9e97c5","kind":"commit","published_at":"2022-02-04T21:49:42.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.4/manifests"},{"name":"v0.37.3","sha":"e4ac7700dd76b9cf30778ef40e9acfd3168dcaeb","kind":"commit","published_at":"2022-02-04T19:44:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.3/manifests"},{"name":"v0.37.2","sha":"d3469801fc1e3eae117049064f751689c64bc8bc","kind":"commit","published_at":"2022-02-04T19:04:15.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.2/manifests"},{"name":"v0.37.1","sha":"3f50bb8fa74436f36202b2582f02be7f91644ab5","kind":"commit","published_at":"2022-02-04T18:23:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.1/manifests"},{"name":"v0.37.0","sha":"341288ba29d66d36afe80f2a7d8eb9b1e53d0a5a","kind":"commit","published_at":"2022-02-04T17:41:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.37.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.37.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.37.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.37.0/manifests"},{"name":"v0.36.0","sha":"aebe843c6f0307d5c263c25257caf3e6ea827c78","kind":"commit","published_at":"2022-01-19T16:43:16.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.36.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.36.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.36.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.36.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.36.0/manifests"},{"name":"v0.35.1","sha":"b77ddfc29c2d93dbc61c25b8f0e726c0e238f43b","kind":"commit","published_at":"2022-01-10T18:40:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.35.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.35.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.35.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.1/manifests"},{"name":"v0.35.0","sha":"5e5312c72ddd4b3d4d6200a5e74e78a6d76aa0c7","kind":"commit","published_at":"2022-01-06T22:52:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.35.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.35.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.35.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.35.0/manifests"},{"name":"v0.34.0","sha":"7f8cb0bd8068709982ef23e931e1ceaa2dfac955","kind":"commit","published_at":"2021-12-22T20:55:37.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.34.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.34.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.34.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.34.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.34.0/manifests"},{"name":"v0.33.0","sha":"a27907659d6c43f5bef2f76a9e381f2bf697a64f","kind":"commit","published_at":"2021-12-16T13:55:53.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.33.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.33.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.33.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.33.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.33.0/manifests"},{"name":"v0.32.2","sha":"727b84ce0da67a35899e966eb4408b3e6553ed63","kind":"commit","published_at":"2021-12-14T17:17:05.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.32.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.2/manifests"},{"name":"v0.32.1","sha":"d3804d1a827c9b1fa9867208de1167a9e62c6e99","kind":"commit","published_at":"2021-12-14T01:49:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.32.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.1/manifests"},{"name":"v0.32.0","sha":"da0b17b719b6d5cabe0819d44f90755c73312de8","kind":"commit","published_at":"2021-12-08T21:25:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.32.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.32.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.32.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.32.0/manifests"},{"name":"v0.31.0","sha":"22c4b275e73d70807fca8017d4896d8398b3373f","kind":"commit","published_at":"2021-12-03T16:12:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.31.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.31.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.31.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.31.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.31.0/manifests"},{"name":"v0.30.1","sha":"45ea4177e8a37a56798bacf89c4b6cdd5d056d6e","kind":"commit","published_at":"2021-11-15T19:41:46.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.30.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.30.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.30.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.30.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.30.1/manifests"},{"name":"v0.29.0","sha":"a2882ee810edcbf4db3230e982c316b261eb17cd","kind":"commit","published_at":"2021-10-29T16:00:36.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.29.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.29.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.29.0/manifests"},{"name":"v0.28.0","sha":"3286a4d4cc88e02e81db4f07d21a9fc6edac2a01","kind":"commit","published_at":"2021-10-28T19:41:39.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.28.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.28.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.28.0/manifests"},{"name":"v0.27.0","sha":"89242e6ed32528132ac79635a856b7a04a77014f","kind":"commit","published_at":"2021-10-21T18:34:17.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.27.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.27.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.27.0/manifests"},{"name":"v0.26.0","sha":"7a005fec0698a405a618242557e03ceebe1ee650","kind":"commit","published_at":"2021-10-15T17:26:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.26.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.26.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.26.0/manifests"},{"name":"v0.25.0","sha":"b25f5b664b21837aee9130d2e63812431bc64a40","kind":"commit","published_at":"2021-10-07T19:18:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.25.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.25.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.25.0/manifests"},{"name":"v0.24.1","sha":"0395c4744581a3d33bf80656f092b19dd75b32fb","kind":"commit","published_at":"2021-09-27T22:31:59.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.24.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.24.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.24.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.1/manifests"},{"name":"v0.24.0","sha":"6d4d083acccc68455e09dd45a474b3f6b5215006","kind":"commit","published_at":"2021-09-23T00:55:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.24.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.24.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.24.0/manifests"},{"name":"v0.23.0","sha":"ddfc8e20c0f370d25e7d032b23bef2e3d519506c","kind":"commit","published_at":"2021-09-13T17:06:23.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.23.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.23.0/manifests"},{"name":"v0.22.0","sha":"06dcd3261dadf77ec0d86e7a981eb4aac7008d09","kind":"commit","published_at":"2021-09-03T21:29:34.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.22.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.22.0/manifests"},{"name":"v0.21.0","sha":"ff828fbac211e1d9e993c309461bd9e0636fc2ec","kind":"commit","published_at":"2021-08-20T17:50:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.21.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.21.0/manifests"},{"name":"v0.20.0","sha":"b0e9b92a257f920bf6b31438a1dba6762fa7390d","kind":"commit","published_at":"2021-08-18T15:00:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.20.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.20.0/manifests"},{"name":"v0.19.1","sha":"fee35dd1753308fc887da744de5d0c66947c7493","kind":"commit","published_at":"2021-06-30T17:10:00.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.19.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.1/manifests"},{"name":"v0.19.0","sha":"2de56c074917b159fdd76fc6b1da974b4c53ca2e","kind":"commit","published_at":"2021-06-29T22:16:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.19.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.19.0/manifests"},{"name":"v0.18.0","sha":"962e82297c329f728018335858ad619ef3e00648","kind":"commit","published_at":"2021-06-29T18:28:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.18.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.18.0/manifests"},{"name":"v0.17.1","sha":"6dd698d89edee65fdcb7c0b2630b6253ed34deba","kind":"commit","published_at":"2021-06-19T18:32:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.17.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.17.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.17.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.1/manifests"},{"name":"v0.17.0","sha":"801e662633304256a05988c868234a2d0ed5a1ae","kind":"commit","published_at":"2021-06-04T16:50:22.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.17.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.17.0/manifests"},{"name":"v0.16.1","sha":"8be0d988e7e793d62afd2e9e2a881428322329cb","kind":"commit","published_at":"2021-05-25T21:13:58.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.16.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.1/manifests"},{"name":"v0.16.0","sha":"80e23bdb506835cdfe26780abcfd977363bae015","kind":"commit","published_at":"2021-05-25T19:01:02.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.16.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.16.0/manifests"},{"name":"v0.15.2","sha":"baa859d2ed084eb7c3d5621a255ad6f277533276","kind":"commit","published_at":"2021-05-12T21:28:52.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.2/manifests"},{"name":"v0.15.1","sha":"032cecbe7f19ca6f6f07d80f8dc902530e4c7502","kind":"commit","published_at":"2021-04-22T20:38:09.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"1632fdd85ebe8692328ce82b8ac3a3849dbdc315","kind":"commit","published_at":"2021-04-22T19:56:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.15.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.15.0/manifests"},{"name":"v0.14.0","sha":"26a4dd36a8932c7867fcdd6296f50643be30f8a6","kind":"commit","published_at":"2021-03-20T16:23:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.14.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.14.0/manifests"},{"name":"v0.13.1","sha":"40e9c4b146b2cf52112619969f18453ce7fa3234","kind":"commit","published_at":"2021-02-26T20:59:49.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.13.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.13.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.1/manifests"},{"name":"v0.13.0","sha":"6d5ff0fd8e7c39c95d30c960c8ae6e95b91cd9d0","kind":"commit","published_at":"2021-02-25T18:47:13.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.13.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.13.0/manifests"},{"name":"v0.12.7","sha":"c5e3b631ac354a6b22d912c6ed8972a433b02eae","kind":"commit","published_at":"2021-02-17T13:14:18.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.7","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.7/manifests"},{"name":"v0.12.6","sha":"8d838b18a85d2c2f0ee976cf2af491913dbcf98b","kind":"commit","published_at":"2021-02-05T16:26:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.6","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.6/manifests"},{"name":"v0.12.5","sha":"b22fd987db989debd8e880e7dfe934d39fd016f3","kind":"commit","published_at":"2021-02-01T17:03:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.5/manifests"},{"name":"v0.12.4","sha":"407769e88cdb5232b72aa573d9643e6624b92743","kind":"commit","published_at":"2021-01-27T16:51:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.4/manifests"},{"name":"v0.12.3","sha":"7bcdafe745a58592552393f8cb32f2d58982aa21","kind":"commit","published_at":"2021-01-22T21:10:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.3/manifests"},{"name":"v0.12.2","sha":"0f6288881bf8db287e07576bf8dd067184745759","kind":"commit","published_at":"2021-01-06T02:32:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.2/manifests"},{"name":"v0.12.1","sha":"bb70b0b43ee794c97266cc352a37804f2068acd2","kind":"commit","published_at":"2021-01-05T00:45:03.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"37b96a241b043f09f6cfee145c19b425e858f939","kind":"commit","published_at":"2021-01-04T21:50:35.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.12.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.12.0/manifests"},{"name":"v0.11.1","sha":"e299a5355fffa8a200f7076befeaf4a494d495f7","kind":"commit","published_at":"2020-12-23T18:23:01.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.11.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.1/manifests"},{"name":"v0.11.0","sha":"6aaf9ee712f41c38eefe17a07a1aa43cac9e7990","kind":"commit","published_at":"2020-12-18T21:59:30.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.11.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"52bac6e2fd1adb3d8852f0fab6536a81ec037b89","kind":"commit","published_at":"2020-12-10T03:20:53.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.10.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.10.0/manifests"},{"name":"v0.9.2","sha":"f87c59b4eb5d5b1396dcc8ad06a07a0706c4b7c5","kind":"commit","published_at":"2020-12-03T21:32:24.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.9.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.2/manifests"},{"name":"v0.9.1","sha":"6f9ded60ed144de3e837effdee5d96366441e7d3","kind":"commit","published_at":"2020-12-02T12:50:31.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.1/manifests"},{"name":"v0.9.0","sha":"ae71b8832d16b70b0373a518877d169659f07bd9","kind":"commit","published_at":"2020-11-30T16:37:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.9.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"71939557e6164712accfd0f7486ef4a6c8459656","kind":"commit","published_at":"2020-11-17T18:21:57.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.8.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.8.0/manifests"},{"name":"v0.7.1","sha":"dad1d9691c355c643eb3a7f1be1cadde36d913c7","kind":"commit","published_at":"2020-11-12T14:36:20.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.7.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"9581a0309b570d38037962598d4c30c8d028aaa2","kind":"commit","published_at":"2020-11-11T20:15:12.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.7.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"b3098f3423d11fe10ea18138177258f6d837d379","kind":"commit","published_at":"2020-11-09T19:18:48.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.6.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"ecfc471ce51a2a84ec144263592c223816241c7a","kind":"commit","published_at":"2020-11-04T20:47:55.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.5.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"773581704c736925a7a5485c18bde3f8129f1238","kind":"commit","published_at":"2020-10-30T19:14:32.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.5.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"f19cb03aa07891e433b5e2e6faa956bc9de83bcf","kind":"commit","published_at":"2020-10-26T15:19:25.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.4.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"15e2e32103b9aaf6d816fa2c6d9b9dc94ba8c16b","kind":"commit","published_at":"2020-10-23T15:06:51.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.4.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"1bf1e643ebb49fac1f2f30c1a13ff8b056dec938","kind":"commit","published_at":"2020-10-15T18:41:28.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.3.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.3.0/manifests"},{"name":"v0.2.0","sha":"956af57d3b8e23d5c607f486b0b65a760a602aad","kind":"commit","published_at":"2020-10-08T18:37:06.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.2.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"5adfce19e0abdfb0d2c62c80713b90f681c83bf4","kind":"commit","published_at":"2020-09-29T20:33:40.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0/manifests"},{"name":"v0.1.0-beta.5","sha":"8b81c87d18da91d2a5c8f10fdfb93ec3e05aa1f6","kind":"commit","published_at":"2020-09-26T02:59:19.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.5","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.5/manifests"},{"name":"v0.1.0-beta.4","sha":"676544b6ab7a5b70af7c2d3d2d34b23c50996900","kind":"commit","published_at":"2020-08-10T22:28:43.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.4","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.4/manifests"},{"name":"v0.1.0-beta.3","sha":"2d452bf59e0f44de6051ac3f316c8afafe0a929a","kind":"commit","published_at":"2020-08-10T14:33:44.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.3","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.3/manifests"},{"name":"v0.1.0-beta.2","sha":"06f8355fce7901bf88493323831b235ef068dc4a","kind":"commit","published_at":"2020-07-27T19:13:41.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.2","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.2/manifests"},{"name":"v0.1.0-beta.1","sha":"19eadde9ca03c89f7325b8ff09ba8114abbe4dcf","kind":"commit","published_at":"2020-07-27T13:55:11.000Z","download_url":"https://codeload.github.com/anchore/syft/tar.gz/v0.1.0-beta.1","html_url":"https://github.com/anchore/syft/releases/tag/v0.1.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/anchore/syft@v0.1.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags/v0.1.0-beta.1/manifests"}]},"repo_metadata_updated_at":"2026-08-07T23:36:13.557Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":3.4910977008627997,"forks_count":4.159393546456536,"docker_downloads_count":null,"average":1.9126228118298338},"purl":"pkg:apk/alpine/syft-bash-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.18","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-bash-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-bash-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-bash-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-22T11:00:46.375Z","issues_count":731,"pull_requests_count":2255,"avg_time_to_close_issue":13448535.886297377,"avg_time_to_close_pull_request":877371.7434279706,"issues_closed_count":343,"pull_requests_closed_count":1902,"pull_request_authors_count":150,"issue_authors_count":381,"avg_comments_per_issue":2.1299589603283176,"avg_comments_per_pull_request":0.5197339246119734,"merged_pull_requests_count":1710,"bot_issues_count":11,"bot_pull_requests_count":1193,"past_year_issues_count":194,"past_year_pull_requests_count":931,"past_year_avg_time_to_close_issue":1820259.3389830508,"past_year_avg_time_to_close_pull_request":292805.3951612903,"past_year_issues_closed_count":59,"past_year_pull_requests_closed_count":744,"past_year_pull_request_authors_count":63,"past_year_issue_authors_count":127,"past_year_avg_comments_per_issue":0.9536082474226805,"past_year_avg_comments_per_pull_request":0.32438238453276047,"past_year_bot_issues_count":7,"past_year_bot_pull_requests_count":593,"past_year_merged_pull_requests_count":666,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft-bash-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft-bash-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft-bash-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft-bash-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft-bash-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft-bash-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":316,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2023-05-23T09:59:42.481Z","updated_at":"2023-05-23T09:59:42.481Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.18","url":"https://pkgs.alpinelinux.org/packages?branch=v3.18","ecosystem":"alpine","default":false,"packages_count":20068,"maintainers_count":367,"namespaces_count":2,"keywords_count":3640,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1213},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-05-22T10:43:30.622Z","updated_at":"2026-08-10T05:08:36.172Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/namespaces"}},{"id":14528472,"name":"devel/syft","ecosystem":"pkgsrc","description":"Generate Software Bill of Materials from container images and file systems","homepage":"https://github.com/anchore/syft/","licenses":"apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":["devel"],"namespace":"devel","versions_count":1,"first_release_published_at":"2026-04-25T05:43:59.000Z","latest_release_published_at":"2026-04-25T05:43:59.000Z","latest_release_number":"0.65.0nb32","last_synced_at":"2026-05-27T06:49:08.054Z","created_at":"2026-05-27T06:49:07.792Z","updated_at":"2026-08-07T23:36:14.286Z","registry_url":"https://pkgsrc.se/devel/syft","install_command":"pkg_add syft","documentation_url":"https://pkgsrc.se/devel/syft","metadata":{"pkg_slug":"syft","pkgbase":"syft","machine_arch":"x86_64","opsys":"NetBSD","pkgname_latest":"syft-0.65.0nb32"},"repo_metadata":{},"repo_metadata_updated_at":"2026-08-07T23:36:14.285Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:pkgsrc/devel/syft?arch=x86_64\u0026os=NetBSD","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pkgsrc/devel/syft","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/pkgsrc/devel/syft","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pkgsrc/devel/syft/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/devel%2Fsyft/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/devel%2Fsyft/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/devel%2Fsyft/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/devel%2Fsyft/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/devel%2Fsyft/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/devel%2Fsyft/codemeta","maintainers":[],"registry":{"name":"pkgsrc-netbsd-x86_64-10.1-all","url":"https://cdn.netbsd.org/pub/pkgsrc/packages/NetBSD/x86_64/10.1/All","ecosystem":"pkgsrc","default":true,"packages_count":19690,"maintainers_count":0,"namespaces_count":43,"keywords_count":363,"github":"pkgsrc","metadata":{"funded_packages_count":332},"icon_url":"https://github.com/pkgsrc.png","created_at":"2026-05-26T08:59:24.518Z","updated_at":"2026-08-12T05:03:04.451Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/namespaces"}},{"id":11968969,"name":"github.com/Anchore/syft","ecosystem":"go","description":null,"homepage":null,"licenses":"apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/Anchore/syft","keywords_array":[],"namespace":null,"versions_count":266,"first_release_published_at":"2020-07-27T13:55:11.000Z","latest_release_published_at":"2026-07-27T19:20:49.000Z","latest_release_number":"v1.50.0","last_synced_at":"2026-08-07T22:14:19.003Z","created_at":"2025-08-01T11:54:46.258Z","updated_at":"2026-08-07T23:36:46.123Z","registry_url":"https://pkg.go.dev/github.com/Anchore/syft","install_command":"go get github.com/Anchore/syft","documentation_url":"https://pkg.go.dev/github.com/Anchore/syft#section-documentation","metadata":{},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390713,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"anchore","name":"Anchore, Inc.","uuid":"16208487","kind":"organization","description":"","email":"info@anchore.com","website":"https://anchore.com/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16208487?v=4","repositories_count":96,"last_synced_at":"2026-08-07T14:34:15.826Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/anchore","funding_links":[],"total_stars":26319,"followers":582,"following":0,"created_at":"2022-11-13T02:25:02.273Z","updated_at":"2026-08-07T14:34:15.840Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:36:46.123Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.6078556279763525,"dependent_packages_count":5.254901351480829,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.431378489728591},"purl":"pkg:golang/github.com/%21anchore/syft","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/Anchore/syft","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/Anchore/syft","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/Anchore/syft/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FAnchore%2Fsyft/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FAnchore%2Fsyft/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FAnchore%2Fsyft/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FAnchore%2Fsyft/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FAnchore%2Fsyft/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FAnchore%2Fsyft/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2263068,"maintainers_count":0,"namespaces_count":837425,"keywords_count":122443,"github":"golang","metadata":{"funded_packages_count":65362,"sync_missing_packages_cursor":{"timestamp":"2026-08-12T00:18:10.975284Z","path":"github.com/fhunleth/muontrap","version":"v0.2.1"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-08-12T12:33:12.528Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":8680327,"name":"syft-fish-completion","ecosystem":"alpine","description":"Fish completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":4,"first_release_published_at":"2023-11-30T17:33:46.000Z","latest_release_published_at":"2024-05-12T07:25:43.000Z","latest_release_number":"0.98.0-r3","last_synced_at":"2026-04-01T03:26:47.573Z","created_at":"2023-12-20T10:35:24.452Z","updated_at":"2026-08-07T23:37:06.191Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.19/community/x86_64/syft-fish-completion","install_command":"apk add syft-fish-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390714,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"anchore","name":"Anchore, Inc.","uuid":"16208487","kind":"organization","description":"","email":"info@anchore.com","website":"https://anchore.com/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16208487?v=4","repositories_count":96,"last_synced_at":"2026-08-07T14:34:15.826Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/anchore","funding_links":[],"total_stars":26319,"followers":582,"following":0,"created_at":"2022-11-13T02:25:02.273Z","updated_at":"2026-08-07T14:34:15.840Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:37:06.191Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft-fish-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.19","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-fish-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-fish-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-fish-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft-fish-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft-fish-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft-fish-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft-fish-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft-fish-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft-fish-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":315,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2026-03-01T02:43:46.899Z","updated_at":"2026-03-01T02:43:46.899Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.19","url":"https://pkgs.alpinelinux.org/packages?branch=v3.19","ecosystem":"alpine","default":false,"packages_count":23031,"maintainers_count":392,"namespaces_count":2,"keywords_count":3179,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":849},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-12-20T09:51:56.346Z","updated_at":"2026-08-10T05:08:27.422Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/namespaces"}},{"id":11769446,"name":"syft-fish-completion","ecosystem":"alpine","description":"Fish completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":9,"first_release_published_at":"2025-05-14T21:15:05.000Z","latest_release_published_at":"2026-01-15T20:35:20.000Z","latest_release_number":"1.31.0-r4","last_synced_at":"2026-04-01T01:55:50.841Z","created_at":"2025-06-07T20:01:11.173Z","updated_at":"2026-08-07T23:37:26.125Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.22/community/x86_64/syft-fish-completion","install_command":"apk add syft-fish-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390714,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"anchore","name":"Anchore, Inc.","uuid":"16208487","kind":"organization","description":"","email":"info@anchore.com","website":"https://anchore.com/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16208487?v=4","repositories_count":96,"last_synced_at":"2026-08-07T14:34:15.826Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/anchore","funding_links":[],"total_stars":26319,"followers":582,"following":0,"created_at":"2022-11-13T02:25:02.273Z","updated_at":"2026-08-07T14:34:15.840Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:37:26.125Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft-fish-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.22","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-fish-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-fish-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-fish-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft-fish-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft-fish-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft-fish-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft-fish-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft-fish-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft-fish-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":354,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2025-06-08T18:37:51.629Z","updated_at":"2025-06-08T18:37:51.629Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.22","url":"https://pkgs.alpinelinux.org/packages?branch=v3.22","ecosystem":"alpine","default":false,"packages_count":26323,"maintainers_count":422,"namespaces_count":2,"keywords_count":4640,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1760},"icon_url":"https://github.com/alpinelinux.png","created_at":"2025-06-05T10:49:56.987Z","updated_at":"2026-08-10T05:08:12.754Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/namespaces"}},{"id":11769443,"name":"syft","ecosystem":"alpine","description":"Generate a Software Bill of Materials (SBOM) from container images and filesystems","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":9,"first_release_published_at":"2025-05-14T21:15:05.000Z","latest_release_published_at":"2026-01-15T20:35:20.000Z","latest_release_number":"1.31.0-r4","last_synced_at":"2026-04-01T01:57:14.724Z","created_at":"2025-06-07T20:01:10.574Z","updated_at":"2026-08-07T23:37:26.368Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.22/community/x86_64/syft","install_command":"apk add syft","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390714,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:37:26.368Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.22","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":354,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2025-06-08T18:37:49.841Z","updated_at":"2025-06-08T18:37:49.841Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.22","url":"https://pkgs.alpinelinux.org/packages?branch=v3.22","ecosystem":"alpine","default":false,"packages_count":26323,"maintainers_count":422,"namespaces_count":2,"keywords_count":4640,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1760},"icon_url":"https://github.com/alpinelinux.png","created_at":"2025-06-05T10:49:56.987Z","updated_at":"2026-08-10T05:08:12.754Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/namespaces"}},{"id":8680325,"name":"syft","ecosystem":"alpine","description":"Generate a Software Bill of Materials (SBOM) from container images and filesystems","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":4,"first_release_published_at":"2023-11-30T17:33:46.000Z","latest_release_published_at":"2024-05-12T07:25:43.000Z","latest_release_number":"0.98.0-r3","last_synced_at":"2026-04-01T03:23:31.062Z","created_at":"2023-12-20T10:35:24.280Z","updated_at":"2026-08-07T23:37:36.132Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.19/community/x86_64/syft","install_command":"apk add syft","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390736,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:37:36.132Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.19","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":315,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2024-02-04T22:44:30.275Z","updated_at":"2024-02-04T22:44:30.275Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.19","url":"https://pkgs.alpinelinux.org/packages?branch=v3.19","ecosystem":"alpine","default":false,"packages_count":23031,"maintainers_count":392,"namespaces_count":2,"keywords_count":3179,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":849},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-12-20T09:51:56.346Z","updated_at":"2026-08-10T05:08:27.422Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/namespaces"}},{"id":10348045,"name":"syft","ecosystem":"alpine","description":"Generate a Software Bill of Materials (SBOM) from container images and filesystems","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":2,"first_release_published_at":"2024-06-05T13:36:39.000Z","latest_release_published_at":"2024-07-07T17:34:20.000Z","latest_release_number":"1.4.1-r2","last_synced_at":"2026-04-01T02:06:15.632Z","created_at":"2024-06-11T11:52:28.332Z","updated_at":"2026-08-07T23:37:36.144Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.20/community/x86_64/syft","install_command":"apk add syft","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390714,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:37:36.144Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.20","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":325,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2024-06-12T02:25:23.045Z","updated_at":"2024-06-12T02:25:23.045Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.20","url":"https://pkgs.alpinelinux.org/packages?branch=v3.20","ecosystem":"alpine","default":false,"packages_count":24162,"maintainers_count":405,"namespaces_count":2,"keywords_count":4251,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1506},"icon_url":"https://github.com/alpinelinux.png","created_at":"2024-06-07T11:51:39.915Z","updated_at":"2026-08-10T05:08:24.882Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/namespaces"}},{"id":6050571,"name":"syft","ecosystem":"alpine","description":"Generate a Software Bill of Materials (SBOM) from container images and filesystems","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":79,"first_release_published_at":"2023-01-25T21:27:07.000Z","latest_release_published_at":"2026-07-13T21:50:10.000Z","latest_release_number":"1.46.0-r0","last_synced_at":"2026-07-14T03:29:03.525Z","created_at":"2023-01-31T18:23:12.855Z","updated_at":"2026-08-07T23:37:36.133Z","registry_url":"https://pkgs.alpinelinux.org/package/edge/community/x86_64/syft","install_command":"apk add syft","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390737,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:37:36.133Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":14.64073262366938,"stargazers_count":3.698340638697558,"forks_count":5.635566687539136,"average":5.993659987476518},"purl":"pkg:apk/alpine/syft?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=edge","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/syft/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":"michal@polanski.me","url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":478,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2023-01-31T21:23:27.641Z","updated_at":"2023-01-31T21:23:27.641Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-edge","url":"https://pkgs.alpinelinux.org/packages?branch=edge","ecosystem":"alpine","default":false,"packages_count":39886,"maintainers_count":902,"namespaces_count":3,"keywords_count":6588,"github":"alpinelinux","metadata":{"repos":["main","community","testing"],"funded_packages_count":2846},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.616Z","updated_at":"2026-08-10T05:07:40.402Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/namespaces"}},{"id":11142684,"name":"syft-fish-completion","ecosystem":"alpine","description":"Fish completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":8,"first_release_published_at":"2024-11-09T06:38:04.000Z","latest_release_published_at":"2025-05-08T20:02:17.000Z","latest_release_number":"1.19.0-r5","last_synced_at":"2026-04-01T01:46:28.014Z","created_at":"2024-12-07T14:18:11.127Z","updated_at":"2026-08-07T23:37:36.144Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.21/community/x86_64/syft-fish-completion","install_command":"apk add syft-fish-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390714,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:37:36.144Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft-fish-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.21","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-fish-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-fish-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-fish-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft-fish-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft-fish-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft-fish-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft-fish-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft-fish-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft-fish-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":351,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2024-12-09T13:59:15.757Z","updated_at":"2024-12-09T13:59:15.757Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.21","url":"https://pkgs.alpinelinux.org/packages?branch=v3.21","ecosystem":"alpine","default":false,"packages_count":25394,"maintainers_count":413,"namespaces_count":2,"keywords_count":3612,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1331},"icon_url":"https://github.com/alpinelinux.png","created_at":"2024-12-06T12:06:36.014Z","updated_at":"2026-08-10T05:08:09.536Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/namespaces"}},{"id":7782071,"name":"syft-zsh-completion","ecosystem":"alpine","description":"Zsh completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":7,"first_release_published_at":"2023-05-07T11:41:18.000Z","latest_release_published_at":"2023-11-17T20:59:57.000Z","latest_release_number":"0.84.1-r4","last_synced_at":"2026-04-09T03:02:45.282Z","created_at":"2023-05-22T15:00:51.159Z","updated_at":"2026-08-07T23:37:36.158Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.18/community/x86_64/syft-zsh-completion","install_command":"apk add syft-zsh-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390745,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:37:36.158Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":3.4910977008627997,"forks_count":4.159393546456536,"docker_downloads_count":null,"average":1.9126228118298338},"purl":"pkg:apk/alpine/syft-zsh-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.18","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-zsh-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-zsh-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-zsh-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft-zsh-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft-zsh-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft-zsh-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft-zsh-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft-zsh-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/syft-zsh-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":316,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2023-05-23T09:59:38.887Z","updated_at":"2023-05-23T09:59:38.887Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.18","url":"https://pkgs.alpinelinux.org/packages?branch=v3.18","ecosystem":"alpine","default":false,"packages_count":20068,"maintainers_count":367,"namespaces_count":2,"keywords_count":3640,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1213},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-05-22T10:43:30.622Z","updated_at":"2026-08-10T05:08:36.172Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/namespaces"}},{"id":11769442,"name":"syft-zsh-completion","ecosystem":"alpine","description":"Zsh completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":9,"first_release_published_at":"2025-05-14T21:15:05.000Z","latest_release_published_at":"2026-01-15T20:35:20.000Z","latest_release_number":"1.31.0-r4","last_synced_at":"2026-04-01T01:56:19.551Z","created_at":"2025-06-07T20:01:09.874Z","updated_at":"2026-08-07T23:37:36.146Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.22/community/x86_64/syft-zsh-completion","install_command":"apk add syft-zsh-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390714,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:37:36.146Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft-zsh-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.22","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-zsh-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-zsh-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-zsh-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft-zsh-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft-zsh-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft-zsh-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft-zsh-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft-zsh-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft-zsh-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":354,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2025-06-08T18:37:49.437Z","updated_at":"2025-06-08T18:37:49.437Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.22","url":"https://pkgs.alpinelinux.org/packages?branch=v3.22","ecosystem":"alpine","default":false,"packages_count":26323,"maintainers_count":422,"namespaces_count":2,"keywords_count":4640,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1760},"icon_url":"https://github.com/alpinelinux.png","created_at":"2025-06-05T10:49:56.987Z","updated_at":"2026-08-10T05:08:12.754Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/namespaces"}},{"id":10348053,"name":"syft-bash-completion","ecosystem":"alpine","description":"Bash completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":2,"first_release_published_at":"2024-06-05T13:36:39.000Z","latest_release_published_at":"2024-07-07T17:34:20.000Z","latest_release_number":"1.4.1-r2","last_synced_at":"2026-04-01T02:07:16.102Z","created_at":"2024-06-11T11:52:34.375Z","updated_at":"2026-08-07T23:37:36.154Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.20/community/x86_64/syft-bash-completion","install_command":"apk add syft-bash-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390714,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:37:36.154Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft-bash-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.20","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-bash-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-bash-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-bash-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft-bash-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft-bash-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft-bash-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft-bash-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft-bash-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft-bash-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":325,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2024-06-12T02:25:24.427Z","updated_at":"2024-06-12T02:25:24.427Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.20","url":"https://pkgs.alpinelinux.org/packages?branch=v3.20","ecosystem":"alpine","default":false,"packages_count":24162,"maintainers_count":405,"namespaces_count":2,"keywords_count":4251,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1506},"icon_url":"https://github.com/alpinelinux.png","created_at":"2024-06-07T11:51:39.915Z","updated_at":"2026-08-10T05:08:24.882Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/namespaces"}},{"id":6097246,"name":"syft","ecosystem":"alpine","description":"Generate a Software Bill of Materials (SBOM) from container images and filesystems","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":6,"first_release_published_at":"2022-12-13T02:00:33.000Z","latest_release_published_at":"2023-05-03T06:49:48.000Z","latest_release_number":"0.77.0-r1","last_synced_at":"2026-04-01T03:49:06.013Z","created_at":"2023-01-31T20:37:50.643Z","updated_at":"2026-08-07T23:37:36.167Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.17/community/x86_64/syft","install_command":"apk add syft","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390714,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:37:36.167Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":27.253845290221175,"stargazers_count":3.4804086673402943,"forks_count":4.114741214774896,"average":8.712248793084092},"purl":"pkg:apk/alpine/syft?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.17","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/packages/syft/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/packages/syft/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/packages/syft/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/packages/syft/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/packages/syft/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/packages/syft/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":228,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2023-02-01T07:12:37.433Z","updated_at":"2023-02-01T07:12:37.433Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.17","url":"https://pkgs.alpinelinux.org/packages?branch=v3.17","ecosystem":"alpine","default":false,"packages_count":17817,"maintainers_count":352,"namespaces_count":2,"keywords_count":3375,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1054},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.642Z","updated_at":"2026-08-10T05:08:37.591Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/namespaces"}},{"id":11142682,"name":"syft","ecosystem":"alpine","description":"Generate a Software Bill of Materials (SBOM) from container images and filesystems","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":8,"first_release_published_at":"2024-11-09T06:38:04.000Z","latest_release_published_at":"2025-05-08T20:02:17.000Z","latest_release_number":"1.19.0-r5","last_synced_at":"2026-04-01T01:42:35.352Z","created_at":"2024-12-07T14:18:10.840Z","updated_at":"2026-08-07T23:37:36.174Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.21/community/x86_64/syft","install_command":"apk add syft","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390714,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:37:36.173Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.21","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":351,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2024-12-09T13:59:17.275Z","updated_at":"2024-12-09T13:59:17.275Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.21","url":"https://pkgs.alpinelinux.org/packages?branch=v3.21","ecosystem":"alpine","default":false,"packages_count":25394,"maintainers_count":413,"namespaces_count":2,"keywords_count":3612,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1331},"icon_url":"https://github.com/alpinelinux.png","created_at":"2024-12-06T12:06:36.014Z","updated_at":"2026-08-10T05:08:09.536Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/namespaces"}},{"id":10348049,"name":"syft-zsh-completion","ecosystem":"alpine","description":"Zsh completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":2,"first_release_published_at":"2024-06-05T13:36:39.000Z","latest_release_published_at":"2024-07-07T17:34:20.000Z","latest_release_number":"1.4.1-r2","last_synced_at":"2026-04-01T02:04:40.041Z","created_at":"2024-06-11T11:52:29.947Z","updated_at":"2026-08-07T23:37:36.169Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.20/community/x86_64/syft-zsh-completion","install_command":"apk add syft-zsh-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390714,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:37:36.168Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft-zsh-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.20","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-zsh-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-zsh-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-zsh-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft-zsh-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft-zsh-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft-zsh-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft-zsh-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft-zsh-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft-zsh-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":325,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2024-06-12T02:25:24.334Z","updated_at":"2024-06-12T02:25:24.334Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.20","url":"https://pkgs.alpinelinux.org/packages?branch=v3.20","ecosystem":"alpine","default":false,"packages_count":24162,"maintainers_count":405,"namespaces_count":2,"keywords_count":4251,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1506},"icon_url":"https://github.com/alpinelinux.png","created_at":"2024-06-07T11:51:39.915Z","updated_at":"2026-08-10T05:08:24.882Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/namespaces"}},{"id":11142666,"name":"syft-bash-completion","ecosystem":"alpine","description":"Bash completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":8,"first_release_published_at":"2024-11-09T06:38:04.000Z","latest_release_published_at":"2025-05-08T20:02:17.000Z","latest_release_number":"1.19.0-r5","last_synced_at":"2026-04-01T01:46:29.143Z","created_at":"2024-12-07T14:18:06.433Z","updated_at":"2026-08-07T23:37:36.174Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.21/community/x86_64/syft-bash-completion","install_command":"apk add syft-bash-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390714,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:37:36.174Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft-bash-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.21","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-bash-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-bash-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-bash-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft-bash-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft-bash-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft-bash-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft-bash-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft-bash-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft-bash-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":351,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2024-12-09T13:59:16.072Z","updated_at":"2024-12-09T13:59:16.072Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.21","url":"https://pkgs.alpinelinux.org/packages?branch=v3.21","ecosystem":"alpine","default":false,"packages_count":25394,"maintainers_count":413,"namespaces_count":2,"keywords_count":3612,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1331},"icon_url":"https://github.com/alpinelinux.png","created_at":"2024-12-06T12:06:36.014Z","updated_at":"2026-08-10T05:08:09.536Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/namespaces"}},{"id":11142685,"name":"syft-zsh-completion","ecosystem":"alpine","description":"Zsh completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":8,"first_release_published_at":"2024-11-09T06:38:04.000Z","latest_release_published_at":"2025-05-08T20:02:17.000Z","latest_release_number":"1.19.0-r5","last_synced_at":"2026-04-01T01:45:49.036Z","created_at":"2024-12-07T14:18:11.199Z","updated_at":"2026-08-07T23:37:36.176Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.21/community/x86_64/syft-zsh-completion","install_command":"apk add syft-zsh-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390714,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:37:36.176Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft-zsh-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.21","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-zsh-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-zsh-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-zsh-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft-zsh-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft-zsh-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft-zsh-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft-zsh-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft-zsh-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/syft-zsh-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":351,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2024-12-09T13:59:17.165Z","updated_at":"2024-12-09T13:59:17.165Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.21","url":"https://pkgs.alpinelinux.org/packages?branch=v3.21","ecosystem":"alpine","default":false,"packages_count":25394,"maintainers_count":413,"namespaces_count":2,"keywords_count":3612,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1331},"icon_url":"https://github.com/alpinelinux.png","created_at":"2024-12-06T12:06:36.014Z","updated_at":"2026-08-10T05:08:09.536Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/namespaces"}},{"id":10348056,"name":"syft-fish-completion","ecosystem":"alpine","description":"Fish completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":2,"first_release_published_at":"2024-06-05T13:36:39.000Z","latest_release_published_at":"2024-07-07T17:34:20.000Z","latest_release_number":"1.4.1-r2","last_synced_at":"2026-04-01T02:08:19.965Z","created_at":"2024-06-11T11:52:36.449Z","updated_at":"2026-08-07T23:37:36.186Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.20/community/x86_64/syft-fish-completion","install_command":"apk add syft-fish-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390714,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:37:36.186Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft-fish-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.20","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-fish-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-fish-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-fish-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft-fish-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft-fish-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft-fish-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft-fish-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft-fish-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/syft-fish-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":325,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2024-06-12T02:25:24.863Z","updated_at":"2024-06-12T02:25:24.863Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.20","url":"https://pkgs.alpinelinux.org/packages?branch=v3.20","ecosystem":"alpine","default":false,"packages_count":24162,"maintainers_count":405,"namespaces_count":2,"keywords_count":4251,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1506},"icon_url":"https://github.com/alpinelinux.png","created_at":"2024-06-07T11:51:39.915Z","updated_at":"2026-08-10T05:08:24.882Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/namespaces"}},{"id":11769439,"name":"syft-bash-completion","ecosystem":"alpine","description":"Bash completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":9,"first_release_published_at":"2025-05-14T21:15:05.000Z","latest_release_published_at":"2026-01-15T20:35:20.000Z","latest_release_number":"1.31.0-r4","last_synced_at":"2026-04-01T01:56:18.675Z","created_at":"2025-06-07T20:01:08.318Z","updated_at":"2026-08-07T23:37:36.190Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.22/community/x86_64/syft-bash-completion","install_command":"apk add syft-bash-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390714,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-08-07T23:37:36.189Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft-bash-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.22","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-bash-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-bash-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-bash-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft-bash-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft-bash-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft-bash-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft-bash-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft-bash-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/syft-bash-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":354,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2025-06-08T18:37:49.352Z","updated_at":"2025-06-08T18:37:49.352Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.22","url":"https://pkgs.alpinelinux.org/packages?branch=v3.22","ecosystem":"alpine","default":false,"packages_count":26323,"maintainers_count":422,"namespaces_count":2,"keywords_count":4640,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1760},"icon_url":"https://github.com/alpinelinux.png","created_at":"2025-06-05T10:49:56.987Z","updated_at":"2026-08-10T05:08:12.754Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/namespaces"}},{"id":8680326,"name":"syft-bash-completion","ecosystem":"alpine","description":"Bash completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":4,"first_release_published_at":"2023-11-30T17:33:46.000Z","latest_release_published_at":"2024-05-12T07:25:43.000Z","latest_release_number":"0.98.0-r3","last_synced_at":"2026-04-01T03:26:04.224Z","created_at":"2023-12-20T10:35:24.364Z","updated_at":"2026-04-01T03:26:04.224Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.19/community/x86_64/syft-bash-completion","install_command":"apk add syft-bash-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{},"repo_metadata_updated_at":null,"dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft-bash-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.19","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-bash-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-bash-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-bash-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft-bash-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft-bash-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft-bash-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft-bash-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft-bash-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/syft-bash-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":315,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2026-03-01T02:42:16.301Z","updated_at":"2026-03-01T02:42:16.301Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.19","url":"https://pkgs.alpinelinux.org/packages?branch=v3.19","ecosystem":"alpine","default":false,"packages_count":23031,"maintainers_count":392,"namespaces_count":2,"keywords_count":3179,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":849},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-12-20T09:51:56.346Z","updated_at":"2026-08-10T05:08:27.422Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/namespaces"}},{"id":13013013,"name":"syft-fish-completion","ecosystem":"alpine","description":"Fish completions for syft","homepage":"https://github.com/anchore/syft","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/anchore/syft","keywords_array":[],"namespace":"community","versions_count":2,"first_release_published_at":"2026-01-15T20:32:31.000Z","latest_release_published_at":"2026-02-05T09:16:59.000Z","latest_release_number":"1.38.0-r3","last_synced_at":"2026-04-13T00:08:18.415Z","created_at":"2026-01-31T02:15:11.902Z","updated_at":"2026-08-07T23:35:55.668Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.23/community/x86_64/syft-fish-completion","install_command":"apk add syft-fish-completion","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":37078587,"uuid":"262126497","full_name":"anchore/syft","owner":"anchore","description":"CLI tool and library for generating a Software Bill of Materials from container images and filesystems","archived":false,"fork":false,"pushed_at":"2026-08-07T14:38:16.000Z","size":25738,"stargazers_count":9365,"open_issues_count":613,"forks_count":918,"subscribers_count":67,"default_branch":"main","last_synced_at":"2026-08-07T17:23:29.277Z","etag":null,"topics":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anchore.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-05-07T18:19:29.000Z","updated_at":"2026-08-07T14:38:38.000Z","dependencies_parsed_at":"2026-02-09T05:10:00.002Z","dependency_job_id":"4b460eeb-4a24-479e-91bc-e2a37fb9eb0c","html_url":"https://github.com/anchore/syft","commit_stats":{"total_commits":2000,"total_committers":156,"mean_commits":"12.820512820512821","dds":0.8125,"last_synced_commit":"fe0b78b7fe73b92ad76deed288d3b9b091a14d27"},"previous_names":["anchore/imgbom"],"tags_count":266,"template":false,"template_full_name":null,"purl":"pkg:github/anchore/syft","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anchore","download_url":"https://codeload.github.com/anchore/syft/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/sbom","scorecard":{"id":32481,"data":{"date":"2025-08-11","repo":{"name":"github.com/anchore/syft","commit":"6b48bd4b5e16fa1c1a783b889b5ada52153dc06d"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/detect-schema-changes.yaml:32","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yaml:114","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yaml:115","Info: jobLevel 'contents' permission set to 'read': .github/workflows/remove-awaiting-response-label.yaml:10","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/test-fixture-cache-publish.yaml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:23","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/validate-github-actions.yaml:24","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/validations.yaml:287","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18","Warn: no topLevel permission defined: .github/workflows/detect-schema-changes.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/oss-project-board-add.yaml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:4","Warn: no topLevel permission defined: .github/workflows/remove-awaiting-response-label.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test-fixture-cache-publish.yaml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-anchore-dependencies.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-bootstrap-tools.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-cpe-dictionary-index.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-github-actions.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/validations.yaml:11"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-go-bin-arch-coverage/test:1","Warn: binary detected: cmd/syft/internal/test/integration/test-fixtures/image-pkg-coverage/pkgs/java/example-java-app-maven-0.1.0.jar:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/erlang/26.2.4/linux-amd64/liberts_internal.a:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/pypy-shared-lib/7.3.14/linux-amd64/libpypy3.9-c.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/python-duplicates/3.8.16/linux-amd64/libpython3.8.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd-musl/1.67.1/linux-amd64/libstd-86aefecbddda356d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/darwin/libstd-f6f9eec1635e636a.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.50.0/linux-amd64/libstd-6f77337c1826707d.so:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/darwin/libstd-16f2b65e77054c42.dylib:1","Warn: binary detected: syft/pkg/cataloger/binary/test-fixtures/classifiers/snippets/rust-libstd/1.67.1/linux-amd64/libstd-c6192dd4c4d410ac.so:1","Warn: binary detected: syft/pkg/cataloger/golang/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: syft/pkg/cataloger/rust/test-fixtures/glob-paths/partial-binary:1","Warn: binary detected: test/cli/test-fixtures/image-unknowns/unknown-readable.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: syft_1.30.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.30.0","Info: signed release artifact: syft_1.29.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.1","Info: signed release artifact: syft_1.29.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.29.0","Info: signed release artifact: syft_1.28.0_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.28.0","Info: signed release artifact: syft_1.27.1_checksums.txt.sig: https://github.com/anchore/syft/releases/tag/v1.27.1","Warn: release artifact v1.30.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/238679807","Warn: release artifact v1.29.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/236368945","Warn: release artifact v1.29.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/234023312","Warn: release artifact v1.28.0 does not have provenance: https://api.github.com/repos/anchore/syft/releases/229465686","Warn: release artifact v1.27.1 does not have provenance: https://api.github.com/repos/anchore/syft/releases/224912863"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 8 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automation.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/dependabot-automation.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/oss-project-board-add.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/oss-project-board-add.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/release.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/remove-awaiting-response-label.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/remove-awaiting-response-label.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-anchore-dependencies.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/update-anchore-dependencies.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validations.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/anchore/syft/validations.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:1","Warn: containerImage not pinned by hash: Dockerfile.debug:1: pin your Docker image by updating gcr.io/distroless/static-debian12:debug-nonroot to gcr.io/distroless/static-debian12:debug-nonroot@sha256:0895d6fc256a6938a60c87d92e1148eec0d36198bff9c5d3082e6a56db7756bd","Warn: containerImage not pinned by hash: Dockerfile.nonroot:1: pin your Docker image by updating gcr.io/distroless/static-debian12:nonroot to gcr.io/distroless/static-debian12:nonroot@sha256:cdf4daaf154e3e27cfffc799c16f343a384228f38646928a1513d925f473cb46","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-golang-compiler/Dockerfile:1: pin your Docker image by updating golang:1.18.10-alpine to golang:1.18.10-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807","Warn: containerImage not pinned by hash: cmd/syft/internal/test/integration/test-fixtures/image-suse-all-layers/Dockerfile:5: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:31f3955f475e40c62c6d4209f09fd9738cf6cadfc0f4aa76ba2d4d86f061c5b5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/elf/Dockerfile:1: pin your Docker image by updating gcc:9.5.0 to gcc:9.5.0@sha256:a9aba821155db99d0800920f27bf3a94ead6f9dedf330a2e2ce38da73f5370e3","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:5","Warn: containerImage not pinned by hash: syft/file/cataloger/executable/test-fixtures/shared-info/Dockerfile:7: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/elf-test-fixtures/Dockerfile:25: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-dotnet-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-fedora-32bit/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/binary/test-fixtures/image-jruby/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/debian/test-fixtures/image-single-dpkg/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/dotnet/core/runtime:2.2 to mcr.microsoft.com/dotnet/core/runtime:2.2@sha256:51f94ecc723ee098a03d84e10bd9d871fc4b817736c63362854c3c8bfad6e498","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:9: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-no-depjson/Dockerfile:18: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-self-contained/Dockerfile:17: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-single-file/Dockerfile:16: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app/Dockerfile:78: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:13: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:14: pin your Docker image by updating busybox to busybox@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/golang/test-fixtures/image-small/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:1","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-apache/Dockerfile:5: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/php/test-fixtures/image-extensions/Dockerfile:92: pin your Docker image by updating busybox:latest to busybox:latest@sha256:f9a104fddb33220ec80fc45a4e606c74aadf1ef7a3832eb0b05be9e90cd61f5f","Warn: containerImage not pinned by hash: syft/pkg/cataloger/redhat/test-fixtures/image-rpm-archive/Dockerfile:2","Warn: containerImage not pinned by hash: syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-alpine-3.6:1: pin your Docker image by updating alpine:3.6 to alpine:3.6@sha256:66790a2b79e1ea3e1dabac43990c54aca5d1ddf268d9a5a0285e4167c8b24475","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:1","Warn: containerImage not pinned by hash: test/install/environments/Dockerfile-busybox-1.36:6: pin your Docker image by updating busybox:1.36.1-musl to busybox:1.36.1-musl@sha256:74322b4716a11835c6f413fe9ffc2608ffdb8452f51cad9514a2b804908dc16e","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net2-app/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net6-asp-libman/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-compile-target/Dockerfile:6: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-ilrepack/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: syft/pkg/cataloger/dotnet/test-fixtures/image-net8-privateassets/Dockerfile:8: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:27","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:28","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:33","Warn: pipCommand not pinned by hash: syft/pkg/cataloger/python/test-fixtures/image-multi-site-package/Dockerfile:34","Warn: npmCommand not pinned by hash: .github/workflows/validations.yaml:135","Info:  27 out of  28 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  26 third-party GitHubAction dependencies pinned","Info:  57 out of  93 containerImage dependencies pinned","Info:   6 out of  11 nugetCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   1 out of   1 goCommand dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"272 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0288","Warn: Project is vulnerable to: GO-2022-0969 / GHSA-69cg-p879-7622","Warn: Project is vulnerable to: GO-2022-1144 / GHSA-xrjj-mj9h-534m","Warn: Project is vulnerable to: GO-2023-1571 / GHSA-vvpx-j8f3-3w6h","Warn: Project is vulnerable to: GO-2023-1988 / GHSA-2wrh-6pvc-2jm9","Warn: Project is vulnerable to: GO-2023-2102 / GHSA-4374-p667-p6c8","Warn: Project is vulnerable to: GHSA-qppj-fm5r-hxr3","Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw","Warn: Project is vulnerable to: GO-2022-0493 / GHSA-p782-xgp4-8hr8","Warn: Project is vulnerable to: GHSA-4574-qv3w-fcmg","Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg","Warn: Project is vulnerable to: GHSA-r285-q736-9v95","Warn: Project is vulnerable to: GHSA-h47h-mwp9-c6q6","Warn: Project is vulnerable to: GHSA-29gr-w57f-rpfw","Warn: Project is vulnerable to: GHSA-4g8v-vg43-wpgf","Warn: Project is vulnerable to: GHSA-78rc-8c29-p45g","Warn: Project is vulnerable to: GHSA-7wjx-3g7j-8584","Warn: Project is vulnerable to: GHSA-8xww-x3g3-6jcv","Warn: Project is vulnerable to: GHSA-9h6g-gp95-x3q5","Warn: Project is vulnerable to: GHSA-ffpv-c4hm-3x6v","Warn: Project is vulnerable to: GHSA-h56m-vwxc-3qpw","Warn: Project is vulnerable to: GHSA-hjg4-8q5f-x6fm","Warn: Project is vulnerable to: GHSA-p692-7mm3-3fxg","Warn: Project is vulnerable to: GHSA-p84v-45xj-wwqj","Warn: Project is vulnerable to: GHSA-vfg9-r3fq-jvx4","Warn: Project is vulnerable to: GHSA-vx9j-46rh-fqr8","Warn: Project is vulnerable to: GHSA-x76w-6vjr-8xgj","Warn: Project is vulnerable to: GHSA-xrr4-p6fq-hjg7","Warn: Project is vulnerable to: GHSA-65cv-r6x7-79hv","Warn: Project is vulnerable to: GHSA-86g5-2wh3-gc9j","Warn: Project is vulnerable to: GHSA-cfjv-5498-mph5","Warn: Project is vulnerable to: GHSA-ch3h-j2vf-95pv","Warn: Project is vulnerable to: GHSA-cr3x-7m39-c6jq","Warn: Project is vulnerable to: GHSA-m63j-wh5w-c252","Warn: Project is vulnerable to: GHSA-pc3m-v286-2jwj","Warn: Project is vulnerable to: GHSA-543v-gj2c-r3ch","Warn: Project is vulnerable to: GHSA-3hhc-qp5v-9p2j","Warn: Project is vulnerable to: GHSA-579w-22j4-4749","Warn: Project is vulnerable to: GHSA-9rf5-jm6f-2fmm","Warn: Project is vulnerable to: GHSA-r8fh-hq2p-7qhq","Warn: Project is vulnerable to: GHSA-xrr6-3pc4-m447","Warn: Project is vulnerable to: GHSA-j6gc-792m-qgm2","Warn: Project is vulnerable to: GHSA-j96r-xvjq-r9pg","Warn: Project is vulnerable to: GHSA-pj73-v5mw-pm9j","Warn: Project is vulnerable to: GHSA-vxvp-4xwc-jpp6","Warn: Project is vulnerable to: GHSA-3mgp-fx93-9xv5","Warn: Project is vulnerable to: GHSA-3wqf-4x89-9g79","Warn: Project is vulnerable to: GHSA-4p24-vmcr-4gqj","Warn: Project is vulnerable to: GHSA-7mvr-5x2g-wfc8","Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-9v3m-8fp8-mj99","Warn: Project is vulnerable to: GHSA-ph58-4vrj-w6hr","Warn: Project is vulnerable to: GHSA-34hf-g744-jw64","Warn: Project is vulnerable to: GHSA-4whc-pp4x-9pf3","Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq","Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2","Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6","Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98","Warn: Project is vulnerable to: GHSA-jphg-qwrw-7w9g","Warn: Project is vulnerable to: GHSA-q86f-fmqf-qrf6","Warn: Project is vulnerable to: GHSA-22f2-v57c-j9cx","Warn: Project is vulnerable to: GHSA-3h57-hmj3-gj3p","Warn: Project is vulnerable to: GHSA-54rr-7fvw-6x8f","Warn: Project is vulnerable to: GHSA-5f9h-9pjv-v6j7","Warn: Project is vulnerable to: GHSA-5r2p-j47h-mhpg","Warn: Project is vulnerable to: GHSA-65f5-mfpf-vfhj","Warn: Project is vulnerable to: GHSA-7g2v-jj9q-g3rg","Warn: Project is vulnerable to: GHSA-7wqh-767x-r66v","Warn: Project is vulnerable to: GHSA-8cgq-6mh2-7j6v","Warn: Project is vulnerable to: GHSA-gjh7-p2fx-99vx","Warn: Project is vulnerable to: GHSA-hrqr-hxpp-chr3","Warn: Project is vulnerable to: GHSA-hxqx-xwvh-44m2","Warn: Project is vulnerable to: GHSA-j6w9-fv6q-3q52","Warn: Project is vulnerable to: GHSA-rgr4-9jh5-j4j6","Warn: Project is vulnerable to: GHSA-vpfw-47h7-xj4g","Warn: Project is vulnerable to: GHSA-wq4h-7r42-5hrr","Warn: Project is vulnerable to: GHSA-xj5v-6v4g-jfw6","Warn: Project is vulnerable to: GHSA-jppv-gw3r-w3q8","Warn: Project is vulnerable to: GHSA-ggxm-pgc9-g7fp","Warn: Project is vulnerable to: GHSA-33pp-3763-mrfp","Warn: Project is vulnerable to: GHSA-pr3h-jjhj-573x","Warn: Project is vulnerable to: GHSA-mqcp-p2hv-vw6x","Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx","Warn: Project is vulnerable to: GHSA-34r7-q49f-h37c","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7","Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r","Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc","Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq","Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm","Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp","Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546","Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx","Warn: Project is vulnerable to: GHSA-896r-f27r-55mw","Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp","Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5","Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m","Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9","Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp","Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472","Warn: Project is vulnerable to: GHSA-992f-wf4w-x36v","Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646","Warn: Project is vulnerable to: GO-2025-3829","Warn: Project is vulnerable to: CVE-2021-28831","Warn: Project is vulnerable to: CVE-2021-42374","Warn: Project is vulnerable to: CVE-2021-42375","Warn: Project is vulnerable to: CVE-2021-42378","Warn: Project is vulnerable to: CVE-2021-42379","Warn: Project is vulnerable to: CVE-2021-42380","Warn: Project is vulnerable to: CVE-2021-42381","Warn: Project is vulnerable to: CVE-2021-42382","Warn: Project is vulnerable to: CVE-2021-42383","Warn: Project is vulnerable to: CVE-2021-42384","Warn: Project is vulnerable to: CVE-2021-42385","Warn: Project is vulnerable to: CVE-2021-42386","Warn: Project is vulnerable to: CVE-2022-28391","Warn: Project is vulnerable to: CVE-2022-30065","Warn: Project is vulnerable to: CVE-2022-48174","Warn: Project is vulnerable to: CVE-2023-42363","Warn: Project is vulnerable to: CVE-2023-42364","Warn: Project is vulnerable to: CVE-2023-42365","Warn: Project is vulnerable to: CVE-2023-42366","Warn: Project is vulnerable to: BIT-postgresql-2025-1094","Warn: Project is vulnerable to: BIT-postgresql-2025-4207","Warn: Project is vulnerable to: BIT-redis-2024-31227","Warn: Project is vulnerable to: BIT-redis-2024-31228","Warn: Project is vulnerable to: BIT-redis-2024-31449","Warn: Project is vulnerable to: BIT-redis-2025-27151","Warn: Project is vulnerable to: BIT-redis-2024-46981","Warn: Project is vulnerable to: BIT-redis-2024-51741","Warn: Project is vulnerable to: BIT-redis-2025-21605","Warn: Project is vulnerable to: BIT-redis-2025-32023","Warn: Project is vulnerable to: BIT-redis-2025-48367","Warn: Project is vulnerable to: GHSA-2cwj-8chv-9pp9","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-269g-pwp5-87pp","Warn: Project is vulnerable to: GHSA-599f-7c49-w659","Warn: Project is vulnerable to: GHSA-6mcm-j9cj-3vc3","Warn: Project is vulnerable to: GHSA-76h9-2vwh-w278","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-vmq6-5m68-f53m","Warn: Project is vulnerable to: GHSA-668q-qrv7-99fm","Warn: Project is vulnerable to: GHSA-6v67-2wr5-gvf4","Warn: Project is vulnerable to: GHSA-pr98-23f8-jwxv","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-27hp-xhwr-wr2m","Warn: Project is vulnerable to: GHSA-2rvv-w9r2-rg7m","Warn: Project is vulnerable to: GHSA-5j33-cvvr-w245","Warn: Project is vulnerable to: GHSA-767j-jfh2-jvrc","Warn: Project is vulnerable to: GHSA-7w75-32cg-r6g2","Warn: Project is vulnerable to: GHSA-83qj-6fr2-vhqg","Warn: Project is vulnerable to: GHSA-9xcj-c8cr-8c3c","Warn: Project is vulnerable to: GHSA-c9hw-wf7x-jp9j","Warn: Project is vulnerable to: GHSA-fccv-jmmp-qg76","Warn: Project is vulnerable to: GHSA-g8pj-r55q-5c2v","Warn: Project is vulnerable to: GHSA-h2fw-rfh5-95r3","Warn: Project is vulnerable to: GHSA-h3gc-qfqq-6h8f","Warn: Project is vulnerable to: GHSA-hfrx-6qgj-fp6c","Warn: Project is vulnerable to: GHSA-j39c-c8hj-x4j3","Warn: Project is vulnerable to: GHSA-jgwr-3qm3-26f3","Warn: Project is vulnerable to: GHSA-p22x-g9px-3945","Warn: Project is vulnerable to: GHSA-q3mw-pvr8-9ggc","Warn: Project is vulnerable to: GHSA-qxf4-chvg-4r8r","Warn: Project is vulnerable to: GHSA-r6j3-px5g-cq3x","Warn: Project is vulnerable to: GHSA-wc4r-xq3c-5cf3","Warn: Project is vulnerable to: GHSA-wm9w-rjj3-j356","Warn: Project is vulnerable to: GHSA-v682-8vv8-vpwr","Warn: Project is vulnerable to: GHSA-7v6m-28jr-rg84","Warn: Project is vulnerable to: GHSA-rmrm-75hp-phr2","Warn: Project is vulnerable to: GHSA-x83m-pf6f-pf9g","Warn: Project is vulnerable to: GHSA-cm59-pr5q-cw85","Warn: Project is vulnerable to: GHSA-rc42-6c7j-7h5r","Warn: Project is vulnerable to: GHSA-jjfh-589g-3hjx","Warn: Project is vulnerable to: GHSA-g5h3-w546-pj7f","Warn: Project is vulnerable to: GHSA-xf96-w227-r7c4","Warn: Project is vulnerable to: GHSA-36p3-wjmg-h94x","Warn: Project is vulnerable to: GHSA-hh26-6xwr-ggv7","Warn: Project is vulnerable to: GHSA-4gc7-5j7h-4qph","Warn: Project is vulnerable to: GHSA-4wp7-92pw-q264","Warn: Project is vulnerable to: GHSA-g5mm-vmx4-3rg7","Warn: Project is vulnerable to: GHSA-6gf2-pvqw-37ph","Warn: Project is vulnerable to: GHSA-rfmp-97jj-h8m6","Warn: Project is vulnerable to: GHSA-558x-2xjg-6232","Warn: Project is vulnerable to: GHSA-564r-hj7v-mcr5","Warn: Project is vulnerable to: GHSA-9cmq-m9j5-mvww","Warn: Project is vulnerable to: GHSA-wxqc-pxw9-g2p8","Warn: Project is vulnerable to: GHSA-2rmj-mq67-h97g","Warn: Project is vulnerable to: GHSA-2wrp-6fg6-hmc5","Warn: Project is vulnerable to: GHSA-4wrc-f8pq-fpqp","Warn: Project is vulnerable to: GHSA-ccgv-vj62-xf9h","Warn: Project is vulnerable to: GHSA-gfwj-fwqj-fp3v","Warn: Project is vulnerable to: GHSA-hgjh-9rj2-g67j","Warn: Project is vulnerable to: GHSA-7pm4-g2qj-j85x","Warn: Project is vulnerable to: GHSA-8wx2-9q48-vm9r","Warn: Project is vulnerable to: GHSA-g5vr-rgqm-vf78","Warn: Project is vulnerable to: GHSA-3mc7-4q67-w48m","Warn: Project is vulnerable to: GHSA-98wm-3w3q-mw94","Warn: Project is vulnerable to: GHSA-9w3m-gqgf-c4p9","Warn: Project is vulnerable to: GHSA-c4r9-r8fh-9vj2","Warn: Project is vulnerable to: GHSA-hhhw-99gj-p3c3","Warn: Project is vulnerable to: GHSA-mjmj-j48q-9wg2","Warn: Project is vulnerable to: GHSA-rvwf-54qp-4r6v","Warn: Project is vulnerable to: GHSA-w37g-rhq8-7m4j","Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42","Warn: Project is vulnerable to: GHSA-rrc9-gqf8-8rwg","Warn: Project is vulnerable to: PYSEC-2023-120 / GHSA-45c4-8wx5-qw6w","Warn: Project is vulnerable to: PYSEC-2024-24 / GHSA-5h86-8mv2-jq9f","Warn: Project is vulnerable to: GHSA-5m98-qgg9-wh84","Warn: Project is vulnerable to: GHSA-7gpw-8wmc-pm8g","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: PYSEC-2024-26 / GHSA-8qpw-xqxj-h4r2","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2023-246 / GHSA-gfw2-4jvh-wgfg","Warn: Project is vulnerable to: GHSA-pjjw-qhg8-p2p9","Warn: Project is vulnerable to: PYSEC-2023-250 / GHSA-q3qx-c6g2-7pw2","Warn: Project is vulnerable to: PYSEC-2023-251 / GHSA-qvrw-v9rv-5rjx","Warn: Project is vulnerable to: PYSEC-2023-247 / GHSA-xx9p-xxvh-7g8j","Warn: Project is vulnerable to: PYSEC-2024-230 / GHSA-248v-346w-9cwc","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: PYSEC-2021-140 / GHSA-9w8r-397f-prfh","Warn: Project is vulnerable to: PYSEC-2016-32 / GHSA-fff8-4w9p-7v76","Warn: Project is vulnerable to: PYSEC-2023-117 / GHSA-mrwq-x4v8-fh7p","Warn: Project is vulnerable to: PYSEC-2021-141 / GHSA-pq64-v7f5-gqh8","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-59g5-xgcq-4qw3","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-f96h-pmfr-66vw","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-34jh-p97f-mpxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: RUSTSEC-2021-0139"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T19:28:06.046Z","repository_id":37078587,"created_at":"2025-08-14T19:28:06.046Z","updated_at":"2025-08-14T19:28:06.046Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36390714,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-07T02:00:06.708Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-07T23:35:55.667Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/syft-fish-completion?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.23","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/syft-fish-completion","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/syft-fish-completion","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/syft-fish-completion/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-07T22:00:40.041Z","issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","maintainers":[{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"},{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"},{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"},{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}],"active_maintainers":[{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft-fish-completion/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft-fish-completion/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft-fish-completion/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft-fish-completion/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft-fish-completion/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/syft-fish-completion/codemeta","maintainers":[{"uuid":"michal@polanski.me","login":null,"name":"Michał Polański","email":"michal@polanski.me","url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","packages_count":378,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Michał Polański","role":null,"created_at":"2026-03-04T03:59:06.437Z","updated_at":"2026-03-04T03:59:06.437Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers/michal@polanski.me/packages"}],"registry":{"name":"alpine-v3.23","url":"https://pkgs.alpinelinux.org/packages?branch=v3.23","ecosystem":"alpine","default":false,"packages_count":27576,"maintainers_count":428,"namespaces_count":2,"keywords_count":189,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":733},"icon_url":"https://github.com/alpinelinux.png","created_at":"2026-01-24T14:35:50.739Z","updated_at":"2026-08-12T05:05:17.297Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/namespaces"}}],"commits":{"id":2827,"full_name":"anchore/syft","default_branch":"main","total_commits":3328,"total_committers":251,"total_bot_commits":1192,"total_bot_committers":2,"mean_commits":13.258964143426295,"dds":0.7569110576923077,"past_year_total_commits":573,"past_year_total_committers":79,"past_year_total_bot_commits":283,"past_year_total_bot_committers":2,"past_year_mean_commits":7.253164556962025,"past_year_dds":0.6212914485165795,"last_synced_at":"2026-08-07T13:00:46.594Z","last_synced_commit":"da745b13e888674845de60b067a37af361ceb5ee","created_at":"2023-03-07T09:15:31.124Z","updated_at":"2026-08-07T13:00:45.748Z","committers":[{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":809},{"name":"Alex Goodman","email":"wagoodman","login":"wagoodman","count":736},{"name":"anchore-actions-token-generator[bot]","email":"102182147+anchore-actions-token-generator[bot]","login":"anchore-actions-token-generator[bot]","count":383},{"name":"Christopher Angelo Phillips","email":"32073428+spiffcs","login":"spiffcs","count":216},{"name":"Keith Zantow","email":"kzantow@gmail.com","login":"kzantow","count":195},{"name":"Alfredo Deza","email":"adeza@anchore.com","login":null,"count":107},{"name":"Dan Luhring","email":"luhring","login":"luhring","count":100},{"name":"Weston Steimel","email":"weston.steimel@anchore.com","login":"westonsteimel","count":86},{"name":"William Murphy","email":"will.murphy@anchore.com","login":"willmurphyscode","count":84},{"name":"witchcraze","email":"67056980+witchcraze","login":"witchcraze","count":37},{"name":"Laurent Goderre","email":"laurent.goderre@docker.com","login":"LaurentGoderre","count":37},{"name":"Jonas Xavier","email":"jonas.agx@gmail.com","login":"jonasagx","count":28},{"name":"Rez Moss","email":"hi@rezmoss.com","login":"rezmoss","count":24},{"name":"anchore-oss-update-bot","email":"anchore-oss-update-bot@anchore.com","login":"anchore-oss-update-bot","count":22},{"name":"Colm O hEigeartaigh","email":"coheigea","login":"coheigea","count":20},{"name":"cpendery","email":"35637443+cpendery","login":"cpendery","count":15},{"name":"Alan Pope","email":"alan.pope@anchore.com","login":"popey","count":13},{"name":"Toure Dunnon","email":"toure.dunnon@anchore.com","login":null,"count":13},{"name":"VictorHuu","email":"victorhu493@gmail.com","login":"VictorHuu","count":10},{"name":"Benji Visser","email":"benji@093b.org","login":"noqcks","count":9},{"name":"Sambhav Kothari","email":"skothari44@bloomberg.net","login":"sambhav","count":8},{"name":"Avi Deitcher","email":"deitch","login":"deitch","count":8},{"name":"Justin Chadwell","email":"me@jedevc.com","login":"jedevc","count":7},{"name":"Shane Dell","email":"32347414+Shanedell","login":"Shanedell","count":7},{"name":"Samuel Dacanay","email":"sam.dacanay@anchore.com","login":"dakaneye","count":7},{"name":"Marc-Etienne Vargenau","email":"marc-etienne.vargenau@nokia.com","login":"vargenau","count":7},{"name":"mikey strauss","email":"mdstrauss91@gmail.com","login":"houdini91","count":7},{"name":"Tom Fay","email":"tomfay@microsoft.com","login":"tofay","count":6},{"name":"mikcl","email":"43545032+Mikcl","login":"Mikcl","count":6},{"name":"GGMU","email":"49076226+tomersein","login":"tomersein","count":6},{"name":"Adam McClenaghan","email":"adam@mcclenaghan.co.uk","login":"adammcclenaghan","count":6},{"name":"ChrisJr404","email":"chris@hacknow.com","login":"ChrisJr404","count":5},{"name":"Josh Bressers","email":"josh@bress.net","login":"joshbressers","count":5},{"name":"Kudryavcev Nikolay","email":"35200428+Rupikz","login":"Rupikz","count":5},{"name":"guangwu","email":"guoguangwug@gmail.com","login":"testwill","count":5},{"name":"Batuhan Apaydın","email":"batuhan.apaydin@trendyol.com","login":"developer-guy","count":4},{"name":"James Neate","email":"JamesMNeate@gmail.com","login":"jneate","count":4},{"name":"Nils Hanke","email":"Nirusu","login":"Nirusu","count":3},{"name":"Rayan Salhab","email":"r.salhab@aiyexpertsolutions.com","login":"cyphercodes","count":3},{"name":"Russell Haering","email":"russellhaering@gmail.com","login":"russellhaering","count":3},{"name":"Sai Asish Y","email":"say.apm35@gmail.com","login":"SAY-5","count":3},{"name":"Stefan Profanter","email":"Pro","login":"Pro","count":3},{"name":"Synvoya","email":"hibin.m@gmail.com","login":"Synvoya","count":3},{"name":"Tim Olshansky","email":"456103+timols","login":"timols","count":3},{"name":"Yashas Gunderia","email":"68075205+ychampion","login":"ychampion","count":3},{"name":"Zach Hill","email":"zach@anchore.com","login":"zhill","count":3},{"name":"nadimz","email":"nadim.zubidat@pm.me","login":"nadimz","count":3},{"name":"Đỗ Trọng Hải","email":"41283691+hainenber","login":"hainenber","count":3},{"name":"Brian Ebarb","email":"116963850+brian-ebarb","login":"brian-ebarb","count":3},{"name":"Joel Rudsberg","email":"joel.rudsberg@oracle.com","login":"rudsberg","count":3},{"name":"Mayur Waghmode","email":"42777188+mayurwaghmode","login":"mayurwaghmode","count":3},{"name":"Arpit Jain","email":"3242828+arpitjain099","login":"arpitjain099","count":3},{"name":"Adam Hughes","email":"9903835+tri-adam","login":"tri-adam","count":3},{"name":"Ross Turk","email":"ross@rossturk.com","login":"rossturk","count":2},{"name":"JoeyShapiro","email":"57827758+JoeyShapiro","login":"JoeyShapiro","count":2},{"name":"John Vandenberg","email":"jayvdb@gmail.com","login":"jayvdb","count":2},{"name":"Jose Miguel Parrella","email":"j@bureado.com","login":"bureado","count":2},{"name":"Kenny Moens","email":"kmoens","login":"kmoens","count":2},{"name":"Ralph Bean","email":"rbean@redhat.com","login":"ralphbean","count":2},{"name":"Nikita","email":"33390074+Zilborg","login":"Zilborg","count":2},{"name":"Nathan Voss","email":"njvoss299@gmail.com","login":"njv299","count":2},{"name":"Mohammad Sharief Baig","email":"56253776+sharief007","login":"sharief007","count":2},{"name":"Marcus","email":"jfjrh2014@gmail.com","login":"jfjrh2014","count":2},{"name":"Marco Deicas","email":"60855123+mdeicas","login":"mdeicas","count":2},{"name":"Krystian G.","email":"108719245+krysgor","login":"krysgor","count":2},{"name":"Sebastiaan van Stijn","email":"thaJeztah","login":"thaJeztah","count":2},{"name":"Tim Gerla","email":"tim@gerla.net","login":"tgerla","count":2},{"name":"Toure","email":"tdunnon@gmail.com","login":"Toure","count":2},{"name":"Yoav Alon","email":"65133955+yoav-orca","login":"yoav-orca","count":2},{"name":"briankoe741","email":"101280300+briankoe741","login":"briankoe741","count":2},{"name":"sputnik-mac","email":"sputnik.mac.001@gmail.com","login":"sputnik-mac","count":2},{"name":"Bradley Jones","email":"jones.bradley@me.com","login":"bradleyjones","count":2},{"name":"Luca Comellini","email":"luca.com@gmail.com","login":"lucacome","count":2},{"name":"Haim Helman","email":"hhelman@vmware.com","login":null,"count":2},{"name":"Nicholas R. Smith","email":"santasmith123@hotmail.com","login":null,"count":2},{"name":"j-k","email":"dev@j-k.io","login":"06kellyjac","count":2},{"name":"Thomas Gosteli","email":"ghouscht+github@pm.me","login":"ghouscht","count":2},{"name":"Scott Andrews","email":"andrewssc@vmware.com","login":"scothis","count":2},{"name":"Gijs Calis","email":"51088038+GijsCalis","login":"GijsCalis","count":2},{"name":"Eljees","email":"57435526+Eljees","login":"Eljees","count":2},{"name":"Doug Clarke","email":"douglas.clarke@oracle.com","login":"douglasclarke","count":2},{"name":"David Dashti","email":"47575784+Dashtid","login":"Dashtid","count":2},{"name":"Dan Nurmi","email":"dnurmi@gmail.com","login":"nurmi","count":2},{"name":"Chris Greeno","email":"cgreeno@gmail.com","login":"cgreeno","count":2},{"name":"Asi Greenholts","email":"88270351+asi-cider","login":"asi-cider","count":2},{"name":"Adam Chovanec","email":"23148601+chovanecadam","login":"chovanecadam","count":2},{"name":"Idan Frimark","email":"40820488+FrimIdan","login":"FrimIdan","count":2},{"name":"Hung Nguyen","email":"hung.tran.nguyen.585@gmail.com","login":"HN23","count":2},{"name":"Brian Muenzenmeyer","email":"brian.muenzenmeyer@gmail.com","login":"bmuenzenmeyer","count":1},{"name":"Calum Leslie","email":"calumleslie@gmail.com","login":"calumleslie","count":1},{"name":"Carlos Tadeu Panato Junior","email":"ctadeu@gmail.com","login":"cpanato","count":1},{"name":"Chao Li","email":"li.evan.chao@gmail.com","login":"evanchaoli","count":1},{"name":"Chris Selzo","email":"selzoc@gmail.com","login":"selzoc","count":1},{"name":"Christian Dupuis","email":"cd@docker.com","login":"cdupuis","count":1},{"name":"Bert Coppens","email":"bert.coppens14@gmail.com","login":"Kemosabert","count":1},{"name":"Bernardo de Araujo","email":"bernardo.amc@gmail.com","login":"bernardoamc","count":1},{"name":"Benjamin Grandfond","email":"benjamin.grandfond@docker.com","login":"benja-M-1","count":1},{"name":"Bala Raman","email":"1273137+srbala","login":"srbala","count":1},{"name":"Bob Callaway","email":"bobcallaway","login":"bobcallaway","count":1},{"name":"Blaize Kaye","email":"blaize.kaye@gmail.com","login":"bomoko","count":1},{"name":"Christian Kotzbauer","email":"git@ckotzbauer.de","login":"ckotzbauer","count":1},{"name":"Christian Köberl","email":"derkoe","login":"derkoe","count":1},{"name":"Christoph Blessing","email":"33834216+christoph-blessing","login":"christoph-blessing","count":1},{"name":"DD (Devdatta) Deshpande","email":"dd@codewits.in","login":"dd-cws","count":1},{"name":"Dan","email":"DanHam","login":"DanHam","count":1},{"name":"Danielle Featherstone","email":"99286933+4ell0","login":"4ell0","count":1},{"name":"David Dooling","email":"141646279+whalelines","login":"whalelines","count":1},{"name":"Tristan Farkas","email":"tristanf@axis.com","login":null,"count":1},{"name":"Swathi Gangisetty","email":"swathi@anchore.com","login":null,"count":1},{"name":"Robert Prince","email":"robert.prince@anchore.com","login":null,"count":1},{"name":"Joris van Eijden","email":"joris.vaneijden@oneshoe.nl","login":null,"count":1},{"name":"Frankie G-J","email":"frankieg@vmware.com","login":null,"count":1},{"name":"Archy","email":"6429715+archy-rock3t-cloud","login":"archy-rock3t-cloud","count":1},{"name":"Andrew Garner","email":"garnera@vmware.com","login":"abg","count":1},{"name":"Ali Asghar","email":"98263017+alliasgher","login":"alliasgher","count":1},{"name":"Alexandre Steppé","email":"alexandre.steppe@gmail.com","login":"HatiCode","count":1},{"name":"Alexandr Hacicheant","email":"a.hacicheant@gmail.com","login":"disc","count":1},{"name":"Alex Mason","email":"github@me.axman6.com","login":"axman6","count":1},{"name":"Alex Lehman","email":"117683089+jlehman9","login":"jlehman9","count":1},{"name":"Akihiko Komada","email":"aki1770@gmail.com","login":"aki1770-del","count":1},{"name":"Aidan Delaney","email":"aidan.delaney@gmail.com","login":"AidanDelaney","count":1},{"name":"Ahmet Taha","email":"mail@ahmetozdemir.de","login":"ahoz","count":1},{"name":"5p2O5pe25ouT","email":"245786660@qq.com","login":"5p2O5pe25ouT","count":1},{"name":"Ariel Miculas-Trif","email":"ariel.miculas@gmail.com","login":"ariel-miculas","count":1},{"name":"Arnaud J Le Hors","email":"lehors@us.ibm.com","login":"lehors","count":1},{"name":"Arnout Engelen","email":"arnout@engelen.eu","login":"raboof","count":1},{"name":"Artemii","email":"artemii.fedotov@tutamail.com","login":"Makefolder","count":1},{"name":"TechVest","email":"166724172+TechVest","login":"TechVest","count":1},{"name":"Take","email":"takeru.tt5672@gmail.com","login":"tnken","count":1},{"name":"Sven Gregori","email":"sven@craplab.fi","login":"sgreg","count":1},{"name":"Stijn Taelemans","email":"taelemansst@gmail.com","login":"lem-onade","count":1},{"name":"Steven Maude","email":"StevenMaude","login":"StevenMaude","count":1},{"name":"Stephane Rufer","email":"1128559+rufman","login":"rufman","count":1},{"name":"Stepan","email":"Stepworm@yandex.ru","login":"axidex","count":1},{"name":"Stefan Hacker","email":"mail@hacst.net","login":"hacst","count":1},{"name":"Stef Graces","email":"stefgraces@hotmail.com","login":"stgrace","count":1},{"name":"Sirish Bathina","email":"sirish@kasten.io","login":"bathina2","count":1},{"name":"Simeon Stoykov","email":"84503892+SimeonStoykovQC","login":"SimeonStoykovQC","count":1},{"name":"Shane Dell","email":"32347414+shanedell","login":"shanedell","count":1},{"name":"Shane Alvarez","email":"shane.alv@gmail.com","login":"shanealv","count":1},{"name":"Sem Provoost","email":"27961543+SemProvoost","login":"SemProvoost","count":1},{"name":"Sebastien Dionne","email":"survivant00@gmail.com","login":"survivant","count":1},{"name":"Scott Hebert","email":"scoheb","login":"scoheb","count":1},{"name":"Saleem Abdulrasool","email":"compnerd@compnerd.org","login":"compnerd","count":1},{"name":"Ryuichi Okumura","email":"okuryu@okuryu.com","login":"okuryu","count":1},{"name":"Ryan Moran","email":"155736+ryanmoran","login":"ryanmoran","count":1},{"name":"Rui Chen","email":"rui@chenrui.dev","login":"chenrui333","count":1},{"name":"Ross Kirk","email":"ross.kirk@upwind.io","login":"rkirk-nos","count":1},{"name":"RogueAI","email":"rogueai","login":"rogueai","count":1},{"name":"Robbie Vanbrabant","email":"robbie.vanbrabant@gmail.com","login":"robbiev","count":1},{"name":"Rob Tompkins","email":"chtompki@gmail.com","login":"chtompki","count":1},{"name":"Rob Dimsdale-Zucker","email":"robert.dimsdale@gmail.com","login":"robdimsdale","count":1},{"name":"Rob Cresswell","email":"robcresswell","login":"robcresswell","count":1},{"name":"Rob Best","email":"robertbest89@gmail.com","login":"ribbybibby","count":1},{"name":"Rajan Agaskar","email":"ragaskar@gmail.com","login":"ragaskar","count":1},{"name":"Rafał Maj","email":"rafal.maj@snowflake.com","login":"sfc-gh-rmaj","count":1},{"name":"Praveen Mylavarapu","email":"saipraveenmylavarapu@gmail.com","login":"praveenmylavarapu","count":1},{"name":"Piotr Radkowski","email":"nuada","login":"nuada","count":1},{"name":"sathiya06","email":"64639742+sathiya06","login":"sathiya06","count":1},{"name":"razzle","email":"harry@razzle.cloud","login":"Noxsios","count":1},{"name":"promalert","email":"promalert@outlook.com","login":"promalert","count":1},{"name":"patrikbeno","email":"patrikbeno@gmail.com","login":"patrikbeno","count":1},{"name":"n-bes","email":"n.bes@pm.me","login":"n-bes","count":1},{"name":"marcinbojko","email":"marcin@bojko.com.pl","login":"marcinbojko","count":1},{"name":"majinghe","email":"42570491+majinghe","login":"majinghe","count":1},{"name":"luozexuan","email":"fetchcode@139.com","login":"luozexuan","count":1},{"name":"kyounghoonJang","email":"matkimchi_@naver.com","login":"kyounghunJang","count":1},{"name":"kdt523","email":"krushna.datir231@vit.edu","login":"kdt523","count":1},{"name":"idhyt","email":"idhyt3r@gmail.com","login":"idhyt","count":1},{"name":"honigbot","email":"34426443+honigbot","login":"honigbot","count":1},{"name":"gab","email":"32674884+gabetrau","login":"gabetrau","count":1},{"name":"dufucun","email":"dufuchun@sohu.com","login":"dufucun","count":1},{"name":"dlorenc","email":"lorenc.d@gmail.com","login":"dlorenc","count":1},{"name":"dja-fr","email":"denis.jackowski@gmail.com","login":"dja-fr","count":1},{"name":"cipher-ardvark","email":"99636221+cipher-ardvark","login":"cipher-ardvark","count":1},{"name":"chavacava","email":"salvadorcavadini+github@gmail.com","login":"chavacava","count":1},{"name":"chaoliang yan","email":"z5643222@ad.unsw.edu.au","login":"lawrence3699","count":1},{"name":"camcui","email":"166618273+camcui","login":"camcui","count":1},{"name":"bgoareguer","email":"43874676+bgoareguer","login":"bgoareguer","count":1},{"name":"bahtyar","email":"34988899+Bahtya","login":"Bahtya","count":1},{"name":"Zac Medico","email":"zmedico@gmail.com","login":"zmedico","count":1},{"name":"Yoonho Hann","email":"hnnynh125@gmail.com","login":"hnnynh","count":1},{"name":"William Tang","email":"ttc0419@outlook.com","login":"ttc0419","count":1},{"name":"William Blair","email":"william.douglass.blair@gmail.com","login":"wdblair","count":1},{"name":"William Bates","email":"148372411+will-bates11","login":"will-bates11","count":1},{"name":"Wayne Starr","email":"Racer159","login":"Racer159","count":1},{"name":"Vinod Anandan","email":"vinod@owasp.org","login":"VinodAnandan","count":1},{"name":"Vijay Pillai","email":"vijay.pillai@anchore.com","login":"Vijay-P","count":1},{"name":"Thomas Klausner","email":"wiz@gatalith.at","login":"0-wiz-0","count":1},{"name":"Kursat Topcuoglu","email":"ktopcuoglu","login":"ktopcuoglu","count":1},{"name":"KrysGor","email":"108719245+KrysGor","login":"KrysGor","count":1},{"name":"Kendrick","email":"kmartinix@gmail.com","login":"kendrickm","count":1},{"name":"Jörg Thalheim","email":"Mic92","login":"Mic92","count":1},{"name":"Juan Ariza Toledano","email":"jariza@vmware.com","login":"juan131","count":1},{"name":"Joye Lin","email":"y12studio@gmail.com","login":"y12studio","count":1},{"name":"Joshua Kugler","email":"joshua@azariah.com","login":"jkugler","count":1},{"name":"Jonas Boos","email":"Jonas.boos@bwdbern.ch","login":"jonasboos","count":1},{"name":"Jon McEwen","email":"jon_mcewen@hotmail.com","login":"jonmcewen","count":1},{"name":"Jon Johnson","email":"jonjohnsonjr@gmail.com","login":"jonjohnsonjr","count":1},{"name":"Jeff Squyres","email":"jsquyres","login":"jsquyres","count":1},{"name":"Jason Williams","email":"jasonw@jhu.edu","login":"jhujasonw","count":1},{"name":"Jason Paulos","email":"jasonpaulos","login":"jasonpaulos","count":1},{"name":"Jamie Magee","email":"jamie.magee@gmail.com","login":"JamieMagee","count":1},{"name":"Hiroaki KAWAI","email":"hiroaki.kawai@gmail.com","login":"hkwi","count":1},{"name":"HeyeOpenSource","email":"opensource@heye-International.com","login":"HeyeOpenSource","count":1},{"name":"Henry Sachs","email":"henrysachs@gmail.com","login":"henrysachs","count":1},{"name":"Harm Weites","email":"harmw","login":"harmw","count":1},{"name":"Harippriya Sivapatham","email":"33924695+harippriyas","login":"harippriyas","count":1},{"name":"Hala Ali","email":"129986297+HalaAli198","login":"HalaAli198","count":1},{"name":"Florian Klink","email":"flokli@flokli.de","login":"flokli","count":1},{"name":"Filip Pytloun","email":"filip@pytloun.cz","login":"fpytloun","count":1},{"name":"Eric Larssen","email":"eric.larssen@workiva.com","login":"ericlarssen-wf","count":1},{"name":"Enes Deniz","email":"142517728+3nesdeniz","login":"3nesdeniz","count":1},{"name":"Emmanuel Ferdman","email":"emmanuelferdman@gmail.com","login":"emmanuel-ferdman","count":1},{"name":"Duane May","email":"duanemay","login":"duanemay","count":1},{"name":"Dor Hayun","email":"94103962+dor-hayun","login":"dor-hayun","count":1},{"name":"Dominik Schmidt","email":"dev@dominik-schmidt.de","login":"dschmidt","count":1},{"name":"Dimitri John Ledkov","email":"19779+xnox","login":"xnox","count":1},{"name":"Davide Icardi","email":"davide.icardi@gmail.com","login":"davideicardi","count":1},{"name":"David Shay","email":"davideshay@gmail.com","login":"davideshay","count":1},{"name":"Peter Bücker","email":"naag","login":"naag","count":1},{"name":"Peter Balogh","email":"p.balogh.sa@gmail.com","login":"pbalogh-sa","count":1},{"name":"Paweł Pałucha","email":"pawel.palucha@chainguard.dev","login":"ppalucha","count":1},{"name":"Pavel Buchart","email":"pavel@buchart.cz","login":"paulslaby","count":1},{"name":"Parthib Mukherjee","email":"109328510+hawkaii","login":"hawkaii","count":1},{"name":"PGray","email":"77597544+PGrayCS","login":"PGrayCS","count":1},{"name":"Oscar Hallgren","email":"oscar.hallgren@gmail.com","login":"Crysinyan","count":1},{"name":"OsamaSE","email":"25825931+OsamaSE","login":"OsamaSE","count":1},{"name":"Oleksandr Vodotiiets","email":"oleksandr.vodotiiets@upwind.io","login":"avodotiiets","count":1},{"name":"Niv Govrin","email":"138374496+govrin","login":"govrin","count":1},{"name":"Nick Piper","email":"nick.piper@cgi.com","login":"pipern","count":1},{"name":"Neil Levine","email":"levine@yoyo.org","login":"nwl","count":1},{"name":"Musang Kim","email":"93360094+musangk","login":"musangk","count":1},{"name":"Morten Linderud","email":"morten@linderud.pw","login":"Foxboron","count":1},{"name":"Monibee-Fudgekins","email":"148405685+Monibee-Fudgekins","login":"Monibee-Fudgekins","count":1},{"name":"Miki","email":"amoo_miki@yahoo.com","login":"AMoo-Miki","count":1},{"name":"Mike Zolotarov","email":"96788373+activeobd","login":"activeobd","count":1},{"name":"Mikail","email":"6186720+NyanKiyoshi","login":"NyanKiyoshi","count":1},{"name":"Michael Briley","email":"michael.briley937@gmail.com","login":"MikeTheCyberGuy","count":1},{"name":"Matias Insaurralde","email":"matias@insaurral.de","login":"matiasinsaurralde","count":1},{"name":"Martin Prpič","email":"martin.prpic@gmail.com","login":"mprpic","count":1},{"name":"Mark Severson","email":"miquella@gmail.com","login":"miquella","count":1},{"name":"Mark Galpin","email":"arkenian@gmail.com","login":"markgalpin","count":1},{"name":"Marco Damiani","email":"hangtime23@hotmail.it","login":"drazen04","count":1},{"name":"Marc","email":"152644146+thomassui","login":"thomassui","count":1},{"name":"M_C_J","email":"JouiniMohamedChaker@proton.me","login":"Jouini-Mohamed-Chaker","count":1},{"name":"Lukas Voetmand","email":"lukas@luvosys.de","login":"dervoeti","count":1},{"name":"Luis Miguel Santos","email":"127312735+luissantosHCIT","login":"luissantosHCIT","count":1},{"name":"Ludovic Henry","email":"git@ludovic.dev","login":"luhenry","count":1},{"name":"Lucas Rodriguez","email":"lucas.rodriguez9616@gmail.com","login":"lucasrod16","count":1},{"name":"Lorenzo Orsatti","email":"49567430+lorsatti","login":"lorsatti","count":1}],"past_year_committers":[{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":217},{"name":"anchore-actions-token-generator[bot]","email":"102182147+anchore-actions-token-generator[bot]","login":"anchore-actions-token-generator[bot]","count":66},{"name":"Alex Goodman","email":"wagoodman","login":"wagoodman","count":54},{"name":"Will Murphy","email":"willmurphyscode","login":"willmurphyscode","count":27},{"name":"Rez Moss","email":"hi@rezmoss.com","login":"rezmoss","count":23},{"name":"anchore-oss-update-bot","email":"anchore-oss-update-bot@anchore.com","login":"anchore-oss-update-bot","count":22},{"name":"Keith Zantow","email":"kzantow@gmail.com","login":"kzantow","count":19},{"name":"witchcraze","email":"67056980+witchcraze","login":"witchcraze","count":19},{"name":"Christopher Angelo Phillips","email":"32073428+spiffcs","login":"spiffcs","count":16},{"name":"Alan Pope","email":"alan.pope@anchore.com","login":"popey","count":5},{"name":"VictorHuu","email":"victorhu493@gmail.com","login":"VictorHuu","count":5},{"name":"ChrisJr404","email":"chris@hacknow.com","login":"ChrisJr404","count":5},{"name":"Kudryavcev Nikolay","email":"35200428+Rupikz","login":"Rupikz","count":4},{"name":"nadimz","email":"nadim.zubidat@pm.me","login":"nadimz","count":3},{"name":"Yashas Gunderia","email":"68075205+ychampion","login":"ychampion","count":3},{"name":"Weston Steimel","email":"author@code.w.steimel.me.uk","login":"westonsteimel","count":3},{"name":"Tim Olshansky","email":"456103+timols","login":"timols","count":3},{"name":"Synvoya","email":"hibin.m@gmail.com","login":"Synvoya","count":3},{"name":"Sai Asish Y","email":"say.apm35@gmail.com","login":"SAY-5","count":3},{"name":"Rayan Salhab","email":"r.salhab@aiyexpertsolutions.com","login":"cyphercodes","count":3},{"name":"Arpit Jain","email":"3242828+arpitjain099","login":"arpitjain099","count":3},{"name":"sputnik-mac","email":"sputnik.mac.001@gmail.com","login":"sputnik-mac","count":2},{"name":"Sebastiaan van Stijn","email":"thaJeztah","login":"thaJeztah","count":2},{"name":"Marcus","email":"jfjrh2014@gmail.com","login":"jfjrh2014","count":2},{"name":"JoeyShapiro","email":"57827758+JoeyShapiro","login":"JoeyShapiro","count":2},{"name":"Eljees","email":"57435526+Eljees","login":"Eljees","count":2},{"name":"Doug Clarke","email":"douglas.clarke@oracle.com","login":"douglasclarke","count":2},{"name":"David Dashti","email":"47575784+Dashtid","login":"Dashtid","count":2},{"name":"Chris Greeno","email":"cgreeno@gmail.com","login":"cgreeno","count":2},{"name":"Adam Chovanec","email":"23148601+chovanecadam","login":"chovanecadam","count":2},{"name":"Akihiko Komada","email":"aki1770@gmail.com","login":"aki1770-del","count":1},{"name":"Alexandre Steppé","email":"alexandre.steppe@gmail.com","login":"HatiCode","count":1},{"name":"Ali Asghar","email":"98263017+alliasgher","login":"alliasgher","count":1},{"name":"Archy","email":"6429715+archy-rock3t-cloud","login":"archy-rock3t-cloud","count":1},{"name":"Benjamin Grandfond","email":"benjamin.grandfond@docker.com","login":"benja-M-1","count":1},{"name":"Bernardo de Araujo","email":"bernardo.amc@gmail.com","login":"bernardoamc","count":1},{"name":"Brian Muenzenmeyer","email":"brian.muenzenmeyer@gmail.com","login":"bmuenzenmeyer","count":1},{"name":"Calum Leslie","email":"calumleslie@gmail.com","login":"calumleslie","count":1},{"name":"Dimitri John Ledkov","email":"19779+xnox","login":"xnox","count":1},{"name":"Paweł Pałucha","email":"pawel.palucha@chainguard.dev","login":"ppalucha","count":1},{"name":"Peter Bücker","email":"naag","login":"naag","count":1},{"name":"Rafał Maj","email":"rafal.maj@snowflake.com","login":"sfc-gh-rmaj","count":1},{"name":"Ross Kirk","email":"ross.kirk@upwind.io","login":"rkirk-nos","count":1},{"name":"Saleem Abdulrasool","email":"compnerd@compnerd.org","login":"compnerd","count":1},{"name":"Scott Hebert","email":"scoheb","login":"scoheb","count":1},{"name":"Sebastien Dionne","email":"survivant00@gmail.com","login":"survivant","count":1},{"name":"Simeon Stoykov","email":"84503892+SimeonStoykovQC","login":"SimeonStoykovQC","count":1},{"name":"Stepan","email":"Stepworm@yandex.ru","login":"axidex","count":1},{"name":"William Bates","email":"148372411+will-bates11","login":"will-bates11","count":1},{"name":"Yoav Alon","email":"65133955+yoav-orca","login":"yoav-orca","count":1},{"name":"Yoonho Hann","email":"hnnynh125@gmail.com","login":"hnnynh","count":1},{"name":"bahtyar","email":"34988899+Bahtya","login":"Bahtya","count":1},{"name":"chaoliang yan","email":"z5643222@ad.unsw.edu.au","login":"lawrence3699","count":1},{"name":"gab","email":"32674884+gabetrau","login":"gabetrau","count":1},{"name":"honigbot","email":"34426443+honigbot","login":"honigbot","count":1},{"name":"kdt523","email":"krushna.datir231@vit.edu","login":"kdt523","count":1},{"name":"kyounghoonJang","email":"matkimchi_@naver.com","login":"kyounghunJang","count":1},{"name":"n-bes","email":"n.bes@pm.me","login":"n-bes","count":1},{"name":"promalert","email":"promalert@outlook.com","login":"promalert","count":1},{"name":"Emmanuel Ferdman","email":"emmanuelferdman@gmail.com","login":"emmanuel-ferdman","count":1},{"name":"Enes Deniz","email":"142517728+3nesdeniz","login":"3nesdeniz","count":1},{"name":"Hala Ali","email":"129986297+HalaAli198","login":"HalaAli198","count":1},{"name":"Jason Paulos","email":"jasonpaulos","login":"jasonpaulos","count":1},{"name":"Joel Rudsberg","email":"joel.rudsberg@oracle.com","login":"rudsberg","count":1},{"name":"Jonas Boos","email":"Jonas.boos@bwdbern.ch","login":"jonasboos","count":1},{"name":"Josh Bressers","email":"josh@bress.net","login":"joshbressers","count":1},{"name":"Kendrick","email":"kmartinix@gmail.com","login":"kendrickm","count":1},{"name":"Kursat Topcuoglu","email":"ktopcuoglu","login":"ktopcuoglu","count":1},{"name":"Ludovic Henry","email":"git@ludovic.dev","login":"luhenry","count":1},{"name":"Luis Miguel Santos","email":"127312735+luissantosHCIT","login":"luissantosHCIT","count":1},{"name":"M_C_J","email":"JouiniMohamedChaker@proton.me","login":"Jouini-Mohamed-Chaker","count":1},{"name":"Marc","email":"152644146+thomassui","login":"thomassui","count":1},{"name":"Matias Insaurralde","email":"matias@insaurral.de","login":"matiasinsaurralde","count":1},{"name":"Mike Zolotarov","email":"96788373+activeobd","login":"activeobd","count":1},{"name":"Monibee-Fudgekins","email":"148405685+Monibee-Fudgekins","login":"Monibee-Fudgekins","count":1},{"name":"OsamaSE","email":"25825931+OsamaSE","login":"OsamaSE","count":1},{"name":"PGray","email":"77597544+PGrayCS","login":"PGrayCS","count":1},{"name":"Parthib Mukherjee","email":"109328510+hawkaii","login":"hawkaii","count":1},{"name":"Pavel Buchart","email":"pavel@buchart.cz","login":"paulslaby","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-12T00:00:07.637Z","repositories_count":6637666,"commits_count":921343367,"contributors_count":39228073,"owners_count":1333291,"committers_count":3298064,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"anchore/syft","html_url":"https://github.com/anchore/syft","last_synced_at":"2026-08-07T22:00:40.041Z","status":null,"issues_count":761,"pull_requests_count":2348,"avg_time_to_close_issue":13505704.924581006,"avg_time_to_close_pull_request":914025.157164869,"issues_closed_count":358,"pull_requests_closed_count":1947,"pull_request_authors_count":185,"issue_authors_count":398,"avg_comments_per_issue":2.0932982917214193,"avg_comments_per_pull_request":0.5413117546848382,"merged_pull_requests_count":1746,"bot_issues_count":11,"bot_pull_requests_count":1211,"past_year_issues_count":45,"past_year_pull_requests_count":154,"past_year_avg_time_to_close_issue":3076488.2,"past_year_avg_time_to_close_pull_request":1470556.7654320989,"past_year_issues_closed_count":15,"past_year_pull_requests_closed_count":81,"past_year_pull_request_authors_count":51,"past_year_issue_authors_count":36,"past_year_avg_comments_per_issue":0.8222222222222222,"past_year_avg_comments_per_pull_request":0.7077922077922078,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":62,"past_year_merged_pull_requests_count":68,"created_at":"2023-05-10T14:35:39.261Z","updated_at":"2026-08-07T22:00:40.042Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/anchore%2Fsyft/issues","issue_labels_count":{"table":{"bug":382,"enhancement":303,"good-first-issue":34,"changelog-ignore":28,"new-cataloger":23,"question":16,"breaking-change":16,"license":13,"good first issue":13,"binary-analysis":13,"needs-investigation":11,"dependencies":11,"needs-discussion":8,"ecosystem:java":7,"format:spdx":6,"needs-research":6,"release":5,"ecosystem:python":5,"ecosystem:windows":5,"documentation":4,"json":4,"ecosystem:go":4,"format:cyclonedx":4,"blocked":3,"online":3,"I/O":3,"unknowns":3,"duplicate":3,"new-source":3,"ecosystem:dotnet":3,"ecosystem:nix":2,"attestation":2,"ecosystem:javascript":2,"ecosystem:rust":2,"ecosystem:os":2,"needs-reproduction":2,"cpe":2,"help-wanted":2,"performance":2,"awaiting-response":2,"testing":2,"planning":2,"WIP":1,"ui":1,"external-data":1,"ecosystem:ruby":1,"needs-external-data":1,"pre-release":1,"ecosystem:c":1,"files":1,"discussion":1,"multiple-sources":1,"filtering":1,"community-meeting":1,"windows":1,"spike":1,"ecosystem:perl":1,"regression":1,"ecosystem:wordpress":1}},"pull_request_labels_count":{"table":{"dependencies":1212,"bug":137,"enhancement":118,"changelog-ignore":109,"go":108,"json-schema":66,"github_actions":56,"pre-release":21,"release":12,"breaking-change":12,"documentation":12,"python":11,"WIP":9,"automation":6,"performance":6,"needs-manual-review":6,"blocked":4,"ecosystem:php":3,"ecosystem:dotnet":2,"help-wanted":2,".NET":2,"question":2,"needs-discussion":2,"license":2,"detected-breaking-change":2,"ecosystem:java":1,"needs-tests":1,"breaking change":1,"java":1,"binny":1,"deprecated":1,"security":1,"ecosystem:rust":1,"help wanted":1,"json":1,"ecosystem:go":1}},"issue_author_associations_count":{"table":{"NONE":424,"CONTRIBUTOR":335,"MEMBER":2}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":2187,"NONE":155,"MEMBER":5,"COLLABORATOR":1}},"issue_authors":{"table":{"wagoodman":75,"kzantow":42,"witchcraze":33,"spiffcs":20,"willmurphyscode":16,"tomerse-sg":11,"westonsteimel":10,"joshbressers":8,"luhring":8,"vargenau":8,"tomersein":8,"popey":7,"rezmoss":6,"anchore-actions-token-generator[bot]":6,"deitch":6,"jayvdb":5,"dependabot[bot]":5,"TimBrown1611":5,"henrysachs":5,"noqcks":4,"coheigea":4,"captn3m0":4,"Joerki":4,"Dentrax":4,"chenrui333":3,"jakub-bochenski":3,"devfbe":3,"WestFarmer":3,"edonadei":3,"audunmo":3,"jeremytbrun":3,"markusmuellerusi":3,"developer-guy":3,"dbrugman":3,"alfredodeza":3,"NataliaAn":3,"ericbl":3,"saisatishkarra":2,"eliaslevy":2,"pasieronen":2,"ariel-miculas":2,"martinetd":2,"kaniini":2,"pentago":2,"sunpan1101":2,"chmeliik":2,"mmarseu":2,"haiazuki":2,"AidanDelaney":2,"PatrickStarBaby":2,"sambhav":2,"BlowMeMike":2,"WhyJee":2,"ShuP1":2,"bj1116":2,"Rupikz":2,"merlin-uk":2,"diptanshumittal":2,"houdini91":2,"fg-j":2,"0-wiz-0":2,"chavacava":2,"Mikcl":2,"gobiltd":2,"ilyabrykau-orca":2,"WesHaze":2,"Ajit-15":2,"arkajnag23":2,"jkugler":2,"jonathongardner":2,"dsseng":2,"yogevhenig89":2,"Bruceliu-rs":2,"richlv":2,"mithunms333":2,"douglasclarke":2,"jacobfriedman":2,"SaurabhNair96":2,"rchincha":2,"evanchaoli":2,"willyw0nka":2,"zhill":2,"akpsgit":2,"rudsberg":2,"rafalsatl":2,"marinedayo":2,"willem-delbare":2,"krysgor":2,"njv299":2,"99sao":2,"prosunjitbiswas":2,"jwsapienza":2,"adammcclenaghan":2,"edhinard":2,"datosh":1,"officerNordberg":1,"mhatzl":1,"dor-hayun":1,"sorokinmax":1,"MeikelVielhauer":1,"liukoo":1,"ivangonzalezacuna":1,"teppemat":1,"jpalermo":1,"Mat-Moo":1,"ibreakthecloud":1,"dervoeti":1,"roliver-rpi":1,"rquadling":1,"xpicio":1,"bureado":1,"tomasr":1,"brian-ebarb":1,"ktopcuoglu":1,"stevehipwell":1,"HairyMike":1,"AndreasAndoerfer":1,"PipeItToDevNull":1,"hev":1,"jonathannewell":1,"thespad":1,"jscancella":1,"brnpl":1,"5TEV3-C":1,"black-snow":1,"idefixcert":1,"sda399":1,"templier2":1,"thejan2009":1,"yonas":1,"vjpiyush123":1,"sundarsubburaj":1,"amouat":1,"m4nch0t":1,"zhangzhenyu2":1,"christoph-blessing":1,"ariker":1,"Oh-Py-God":1,"markgalpin":1,"rigzba21":1,"HeyeOpenSource":1,"f16falcon4":1,"cjbischoff":1,"ysebyy":1,"coro":1,"Roxedus":1,"learnitall":1,"aptalca":1,"UnitedHaxor":1,"HUNGPNdev":1,"hkadakia":1,"amascia":1,"sgaist":1,"dja-fr":1,"tafli":1,"floric":1,"tbroyer":1,"Naranthiran":1,"xtreme-conor-nosal":1,"AndriiY-SK":1,"devinrsmith":1,"jesuisben":1,"AndreasS-dot":1,"yaronkaikov":1,"Funsho-Agboola":1,"cdupuis":1,"dsnr-coder":1,"caiotpereira":1,"mydeveloperplanet":1,"Walnussbaer":1,"fernandosci":1,"Carlson-JLQ":1,"jamietanna":1,"stgrace":1,"JL-Tests":1,"scom-technology-operations":1,"jkowalleck":1,"pkroiss":1,"kmontg":1,"robertkowalski":1,"SuglBug2k":1,"danielpacak":1,"jdweaver275":1,"abderrahim":1,"jonathimer":1,"ArmanPasha":1,"sasakiyuta84":1,"BinhTNT":1,"prog8":1,"sekveaja":1,"vchhasatia":1,"zecke":1,"murarishetti":1,"bzemms":1,"dwertent":1,"olivierboudet":1,"bardenstein":1,"pczuj":1,"p-linnane":1,"Vishnu-2810":1,"lumjjb":1,"kairabiensda":1,"FirelightFlagboy":1,"limaonet":1,"maxgip":1,"compnerd":1,"idunbarh":1,"rafutek":1,"jaskaransinghdr6j":1,"MPV":1,"Auston-Zhang":1,"miller79":1,"jscheid":1,"ciphernaut-rh":1,"durera":1,"nadimz":1,"mc-alt":1,"mephinet":1,"Nirusu":1,"kuwv":1,"muzammil786":1,"blang9238":1,"mbihoop":1,"RichardDally":1,"jlehman9":1,"surendrapathak":1,"Silvanoc":1,"ruzickap":1,"patpatpat123":1,"nfelt14":1,"aniketdn":1,"tri-adam":1,"davidkesoshvili":1,"rnadler":1,"duranjesus":1,"flxw":1,"vremy":1,"kaiorafael":1,"dreamerwise":1,"Disservin":1,"KratochvilLukas":1,"sankyfunky":1,"amascia-gg":1,"henryde":1,"james-mullen3":1,"cx-shaked-karta":1,"rmkanda":1,"milad-a-j":1,"hittingray":1,"fpoirotte":1,"robbat2":1,"p5":1,"MEI-MSS":1,"shamil-mubarakshin":1,"Sirdorblu":1,"jc776":1,"bgoareguer":1,"parvjain639":1,"tpodowd":1,"paoloteti":1,"KeylinxTobias":1,"luissantosHCIT":1,"dmuhamedagic":1,"joshuatz":1,"yaabdala":1,"rplessl":1,"jrjsmrtn":1,"lem-onade":1,"cpkt-kabrahams":1,"miftacul":1,"dd-cws":1,"davidr-bgp":1,"andyantrim":1,"FrimIdan":1,"Racer159":1,"david-gherghita":1,"bm402":1,"morsisko":1,"vishwesh-sharma":1,"bretik":1,"mcbenjemaa":1,"markussiebert":1,"wbradley94":1,"francescomedina":1,"kchr":1,"e4711s":1,"mymichu":1,"jhojczak":1,"Mariuxdeangelo":1,"tallstory":1,"HaKAtWork":1,"fmenezes":1,"freeeflyer":1,"sprathod369":1,"dszortyka":1,"yoav-orca":1,"tchaumeny":1,"joaquinricci":1,"crazy-max":1,"cilki":1,"g-suraj":1,"markusjnagel":1,"aerabi":1,"ecki":1,"ivanprosh":1,"prabhu":1,"tetzla":1,"thomas-bc":1,"Dungeon1":1,"tsvirinkal-jsi":1,"Pierre-Gronau-ndaal":1,"jsquyres":1,"jngrb":1,"narasimhathejarao":1,"DanielRuf":1,"DominikPalo":1,"ljones140":1,"jeason81":1,"Annamikhlin":1,"100tomer":1,"blacktop":1,"lucacome":1,"lukas-braune":1,"cjnosal":1,"dariozachow":1,"thommelutten":1,"espressodriven":1,"b00ga":1,"phamhp":1,"thomassui":1,"NyanKiyoshi":1,"selzoc":1,"jokarl":1,"pooja0805":1,"Galactic21":1,"chrisbmyers":1,"Shweta4398":1,"tk103331":1,"t-nero":1,"hdiederichs":1,"patrickSeal":1,"bcmedeiros":1,"shanealv":1,"ashearin":1,"Ccaomei":1,"cinerea0":1,"cajual":1,"dukelaar":1,"dwisiswant0":1,"rriemann":1,"Lachlan-White":1,"mythili-krishnan":1,"kickinranch":1,"tgerla":1,"benispeti":1,"pointo1d":1,"EmyLIEUTAUD":1,"Dashtid":1,"pushkargr":1,"gandalf1990PL":1,"ghost":1,"makotosato-at":1,"LaurentGoderre":1,"wagner-robert":1,"igor-makarov":1,"t-k-u":1,"nycnewman":1,"sumanthkb44":1,"rvesse":1,"chovanecadam":1,"wresch":1,"siliroid":1,"OnceUponALoop":1,"fpytloun":1,"Nicolas-Peiffer":1,"tina94happy":1,"AndrewR777":1,"kimjune01":1,"egertoft":1,"ragaskar":1,"ivanchubb":1,"cpendery":1,"dev-bio":1,"gbonnefille":1,"MArfanM":1,"mdeicas":1,"mathrock":1,"barnuri":1,"elifarley":1,"deblaci":1,"tobyweston":1,"atl-mk":1,"wenoukiz":1,"kl-sinclair":1,"reure1":1,"OddBloke":1,"SamYuan1990":1,"wieringen":1}},"pull_request_authors":{"table":{"dependabot[bot]":819,"anchore-actions-token-generator[bot]":392,"wagoodman":251,"kzantow":131,"spiffcs":118,"willmurphyscode":79,"LaurentGoderre":56,"westonsteimel":51,"coheigea":20,"popey":19,"witchcraze":19,"VictorHuu":18,"tomersein":15,"adammcclenaghan":13,"BlowMeMike":12,"rezmoss":12,"krysgor":9,"houdini91":8,"testwill":7,"MikeTheCyberGuy":7,"russellhaering":6,"brian-ebarb":6,"Mikcl":6,"anchore-oss-update-bot":6,"HeyeOpenSource":5,"luhring":5,"Shanedell":4,"njv299":4,"dervoeti":4,"HN23":4,"rudsberg":4,"dor-hayun":4,"noqcks":4,"ghouscht":4,"C0D3-M4513R":3,"hainenber":3,"ralphbean":3,"idhyt":3,"jonjohnsonjr":3,"jsquyres":3,"jayvdb":3,"ariel-miculas":3,"GijsCalis":3,"okuryu":2,"dufucun":2,"Mic92":2,"bgoareguer":2,"cgreeno":2,"sathiya06":2,"yoav-orca":2,"Miablo":2,"sharief007":2,"mprpic":2,"camcui":2,"cloudaid":2,"stgrace":2,"JoshuaChen":2,"sgreg":2,"cdupuis":2,"ankit090701":2,"ttc0419":2,"jneate":2,"SAY-5":2,"avodotiiets":2,"raghavvag":2,"jimmystewpot":2,"Rupikz":2,"Pro":2,"lem-onade":2,"juan131":2,"sputnik-mac":2,"naoriel":2,"harippriyas":2,"cyberoslab":2,"jkugler":2,"nuada":2,"markgalpin":2,"disc":2,"TechVest":2,"barnuri":2,"zecke":2,"cpendery":2,"dschmidt":2,"gdams":2,"Kemosabert":2,"asi-cider":2,"johnDeSilencio":2,"arpitjain099":2,"RyanHopkins7":2,"luozexuan":2,"NyanKiyoshi":2,"Makefolder":2,"musangk":2,"christoph-blessing":2,"tofay":2,"danielpacak":2,"rogueai":2,"govrin":2,"deitch":2,"axman6":2,"rylena":1,"chenrui333":1,"joshbressers":1,"shanedell":1,"omkute10":1,"dlorenc":1,"jfjrh2014":1,"cpanato":1,"bradleyjones":1,"bobcallaway":1,"hsdfat":1,"l46983284-cpu":1,"raboof":1,"duanemay":1,"trilleplay":1,"sueun-dev":1,"ktopcuoglu":1,"lxcxjxhx":1,"nwl":1,"shanealv":1,"dwindsor":1,"gunnypatel":1,"archy-rock3t-cloud":1,"sgaist":1,"toabctl":1,"hawkaii":1,"bernardoamc":1,"skyhisi":1,"fpytloun":1,"vigneshakaviki":1,"tom-paz":1,"ychampion":1,"evanchaoli":1,"EchterTimo":1,"ragaskar":1,"ahoz":1,"josegomezr":1,"hacst":1,"SimeonStoykovQC":1,"andyantrim":1,"henrysachs":1,"dissoupov":1,"Pyronewbic":1,"KrysGor":1,"pujitha24":1,"FrimIdan":1,"Racer159":1,"kimjune01":1,"miquella":1,"manifestori":1,"chkp-alexgl":1,"jasonpaulos":1,"nadimz":1,"robbiev":1,"lucasrod16":1,"kyounghunJang":1,"gabetrau":1,"Auston-Zhang":1,"Fearkin":1,"ankk13":1,"jatinder14":1,"Itxaka":1,"jamietanna":1,"hnnynh":1,"AidanDelaney":1,"canolgun":1,"bathina2":1,"scop":1,"jlehman9":1,"Eljees":1,"youdie006":1,"abg":1,"idefixcert":1,"5p2O5pe25ouT":1,"Jouini-Mohamed-Chaker":1,"harmw":1,"tgerla":1,"SemProvoost":1,"dsseng":1,"tnken":1,"chavacava":1,"4ell0":1,"vargenau":1,"whalelines":1,"selzoc":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-12T00:00:07.634Z","repositories_count":16026382,"issues_count":40536820,"pull_requests_count":131048287,"authors_count":11440391,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{"bug":24,"enhancement":15,"good-first-issue":3,"needs-discussion":2,"ecosystem:c":1,"dependencies":1,"needs-research":1,"new-cataloger":1,"release":1}},"past_year_pull_request_labels_count":{"table":{"dependencies":59,"needs-manual-review":6,"automation":6,"changelog-ignore":6,"json-schema":5,"bug":3,"pre-release":2,"release":1,"binny":1,"documentation":1,"enhancement":1,"go":1,"needs-discussion":1}},"past_year_issue_author_associations_count":{"table":{"NONE":27,"CONTRIBUTOR":16,"MEMBER":1}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":118,"NONE":27}},"past_year_issue_authors":{"table":{"witchcraze":5,"rezmoss":5,"WesHaze":2,"audunmo":1,"MEI-MSS":1,"mhatzl":1,"milad-a-j":1,"nadimz":1,"roliver-rpi":1,"sgaist":1,"siliroid":1,"spiffcs":1,"teppemat":1,"thomassui":1,"wagner-robert":1,"wagoodman":1,"Walnussbaer":1,"zhill":1,"benispeti":1,"chmeliik":1,"chrisbmyers":1,"compnerd":1,"coro":1,"cx-shaked-karta":1,"dependabot[bot]":1,"Disservin":1,"douglasclarke":1,"igor-makarov":1,"ivanprosh":1,"jonathimer":1,"jrjsmrtn":1,"kimjune01":1,"ktopcuoglu":1,"kzantow":1,"Mat-Moo":1}},"past_year_pull_request_authors":{"table":{"dependabot[bot]":46,"anchore-actions-token-generator[bot]":11,"kzantow":11,"rezmoss":10,"wagoodman":7,"anchore-oss-update-bot":6,"spiffcs":3,"popey":2,"Miablo":2,"SAY-5":2,"sputnik-mac":2,"ankit090701":2,"arpitjain099":2,"witchcraze":2,"cgreeno":2,"sueun-dev":1,"willmurphyscode":1,"skyhisi":1,"sgaist":1,"scop":1,"toabctl":1,"rylena":1,"rudsberg":1,"vigneshakaviki":1,"ychampion":1,"Pyronewbic":1,"pujitha24":1,"youdie006":1,"westonsteimel":1,"ankk13":1,"archy-rock3t-cloud":1,"bernardoamc":1,"canolgun":1,"EchterTimo":1,"Eljees":1,"gunnypatel":1,"hnnynh":1,"hsdfat":1,"idhyt":1,"Itxaka":1,"jasonpaulos":1,"jatinder14":1,"jfjrh2014":1,"Jouini-Mohamed-Chaker":1,"kimjune01":1,"ktopcuoglu":1,"kyounghunJang":1,"l46983284-cpu":1,"lxcxjxhx":1,"nadimz":1}},"maintainers":[{"table":{"login":"HN23","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HN23"}},{"table":{"login":"zhill","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}},{"table":{"login":"bradleyjones","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bradleyjones"}},{"table":{"login":"joshbressers","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshbressers"}}],"active_maintainers":[{"table":{"login":"zhill","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhill"}}]}},"events":null,"keywords":["containers","cyclonedx","docker","go","golang","hacktoberfest","oci","sbom","spdx","static-analysis","tool"],"dependencies":[{"ecosystem":"actions","filepath":".github/actions/bootstrap/action.yaml","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:04.592Z","updated_at":"2023-09-21T17:10:04.592Z","repository_link":"https://github.com/anchore/syft/blob/main/.github/actions/bootstrap/action.yaml","dependencies":[{"id":13854466860,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"93397bea11091df50f3d7e59dc26a7711a8bcfbe","direct":true,"kind":"composite","optional":false},{"id":13854466861,"package_name":"actions/cache","ecosystem":"actions","requirements":"704facf57e6136b1bc63b828d79edcd491f0ee84","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/codeql-analysis.yml","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:04.755Z","updated_at":"2023-09-21T17:10:04.755Z","repository_link":"https://github.com/anchore/syft/blob/main/.github/workflows/codeql-analysis.yml","dependencies":[{"id":13854467220,"package_name":"actions/checkout","ecosystem":"actions","requirements":"3df4ab11eba7bda6032a0b82a6bb43b11571feac","direct":true,"kind":"composite","optional":false},{"id":13854467221,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"93397bea11091df50f3d7e59dc26a7711a8bcfbe","direct":true,"kind":"composite","optional":false},{"id":13854467222,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"6a28655e3dcb49cb0840ea372fd6d17733edd8a4","direct":true,"kind":"composite","optional":false},{"id":13854467223,"package_name":"github/codeql-action/autobuild","ecosystem":"actions","requirements":"6a28655e3dcb49cb0840ea372fd6d17733edd8a4","direct":true,"kind":"composite","optional":false},{"id":13854467224,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"6a28655e3dcb49cb0840ea372fd6d17733edd8a4","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/oss-project-board-add.yaml","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:04.830Z","updated_at":"2023-09-21T17:10:04.830Z","repository_link":"https://github.com/anchore/syft/blob/main/.github/workflows/oss-project-board-add.yaml","dependencies":[]},{"ecosystem":"actions","filepath":".github/workflows/release.yaml","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:04.909Z","updated_at":"2023-09-21T17:10:04.909Z","repository_link":"https://github.com/anchore/syft/blob/main/.github/workflows/release.yaml","dependencies":[{"id":13854467363,"package_name":"actions/checkout","ecosystem":"actions","requirements":"3df4ab11eba7bda6032a0b82a6bb43b11571feac","direct":true,"kind":"composite","optional":false},{"id":13854467364,"package_name":"fountainhead/action-wait-for-check","ecosystem":"actions","requirements":"297be350cf8393728ea4d4b39435c7d7ae167c93","direct":true,"kind":"composite","optional":false},{"id":13854467365,"package_name":"./.github/actions/bootstrap","ecosystem":"actions","requirements":"*","direct":true,"kind":"composite","optional":false},{"id":13854467366,"package_name":"docker/login-action","ecosystem":"actions","requirements":"343f7c4344506bcbf9b4de18042ae17996df046d","direct":true,"kind":"composite","optional":false},{"id":13854467367,"package_name":"anchore/sbom-action","ecosystem":"actions","requirements":"78fc58e266e87a38d4194b2137a3d4e9bcaf7ca1","direct":true,"kind":"composite","optional":false},{"id":13854467368,"package_name":"8398a7/action-slack","ecosystem":"actions","requirements":"fbd6aa58ba854a740e11a35d0df80cb5d12101d8","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/update-bootstrap-tools.yml","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:05.057Z","updated_at":"2023-09-21T17:10:05.057Z","repository_link":"https://github.com/anchore/syft/blob/main/.github/workflows/update-bootstrap-tools.yml","dependencies":[{"id":13854467935,"package_name":"actions/checkout","ecosystem":"actions","requirements":"3df4ab11eba7bda6032a0b82a6bb43b11571feac","direct":true,"kind":"composite","optional":false},{"id":13854467939,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"93397bea11091df50f3d7e59dc26a7711a8bcfbe","direct":true,"kind":"composite","optional":false},{"id":13854467942,"package_name":"tibdex/github-app-token","ecosystem":"actions","requirements":"3beb63f4bd073e61482598c45c71c1019b59b73a","direct":true,"kind":"composite","optional":false},{"id":13854467945,"package_name":"peter-evans/create-pull-request","ecosystem":"actions","requirements":"153407881ec5c347639a548ade7d8ad1d6740e38","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/update-cpe-dictionary-index.yml","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:05.532Z","updated_at":"2023-09-21T17:10:05.532Z","repository_link":"https://github.com/anchore/syft/blob/main/.github/workflows/update-cpe-dictionary-index.yml","dependencies":[{"id":13854468518,"package_name":"actions/checkout","ecosystem":"actions","requirements":"3df4ab11eba7bda6032a0b82a6bb43b11571feac","direct":true,"kind":"composite","optional":false},{"id":13854468519,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"3df4ab11eba7bda6032a0b82a6bb43b11571feac","direct":true,"kind":"composite","optional":false},{"id":13854468520,"package_name":"tibdex/github-app-token","ecosystem":"actions","requirements":"3beb63f4bd073e61482598c45c71c1019b59b73a","direct":true,"kind":"composite","optional":false},{"id":13854468521,"package_name":"peter-evans/create-pull-request","ecosystem":"actions","requirements":"153407881ec5c347639a548ade7d8ad1d6740e38","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/validations.yaml","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:05.768Z","updated_at":"2023-09-21T17:10:05.768Z","repository_link":"https://github.com/anchore/syft/blob/main/.github/workflows/validations.yaml","dependencies":[{"id":13854469277,"package_name":"actions/checkout","ecosystem":"actions","requirements":"3df4ab11eba7bda6032a0b82a6bb43b11571feac","direct":true,"kind":"composite","optional":false},{"id":13854469278,"package_name":"./.github/actions/bootstrap","ecosystem":"actions","requirements":"*","direct":true,"kind":"composite","optional":false},{"id":13854469279,"package_name":"actions/cache","ecosystem":"actions","requirements":"704facf57e6136b1bc63b828d79edcd491f0ee84","direct":true,"kind":"composite","optional":false},{"id":13854469280,"package_name":"actions/cache/save","ecosystem":"actions","requirements":"704facf57e6136b1bc63b828d79edcd491f0ee84","direct":true,"kind":"composite","optional":false},{"id":13854469281,"package_name":"actions/cache/restore","ecosystem":"actions","requirements":"704facf57e6136b1bc63b828d79edcd491f0ee84","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":"syft/pkg/cataloger/githubactions/test-fixtures/glob/.github/actions/bootstrap/action.yaml","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:06.042Z","updated_at":"2023-09-21T17:10:06.042Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/githubactions/test-fixtures/glob/.github/actions/bootstrap/action.yaml","dependencies":[]},{"ecosystem":"actions","filepath":"syft/pkg/cataloger/githubactions/test-fixtures/glob/.github/actions/unbootstrap/action.yml","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:06.150Z","updated_at":"2023-09-21T17:10:06.150Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/githubactions/test-fixtures/glob/.github/actions/unbootstrap/action.yml","dependencies":[]},{"ecosystem":"cargo","filepath":"syft/pkg/cataloger/rust/test-fixtures/Cargo.lock","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:10:06.977Z","updated_at":"2023-09-21T17:10:06.977Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/rust/test-fixtures/Cargo.lock","dependencies":[{"id":13854472548,"package_name":"ansi_term","ecosystem":"cargo","requirements":"0.12.1","direct":false,"kind":"runtime","optional":false},{"id":13854472551,"package_name":"matches","ecosystem":"cargo","requirements":"0.1.8","direct":false,"kind":"runtime","optional":false},{"id":13854472553,"package_name":"memchr","ecosystem":"cargo","requirements":"2.3.3","direct":false,"kind":"runtime","optional":false},{"id":13854472555,"package_name":"natord","ecosystem":"cargo","requirements":"1.0.9","direct":false,"kind":"runtime","optional":false},{"id":13854472557,"package_name":"nom","ecosystem":"cargo","requirements":"4.2.3","direct":false,"kind":"runtime","optional":false},{"id":13854472559,"package_name":"unicode-bidi","ecosystem":"cargo","requirements":"0.3.4","direct":false,"kind":"runtime","optional":false},{"id":13854472562,"package_name":"version_check","ecosystem":"cargo","requirements":"0.1.5","direct":false,"kind":"runtime","optional":false},{"id":13854472564,"package_name":"winapi","ecosystem":"cargo","requirements":"0.3.9","direct":false,"kind":"runtime","optional":false},{"id":13854472566,"package_name":"winapi-i686-pc-windows-gnu","ecosystem":"cargo","requirements":"0.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854472568,"package_name":"winapi-x86_64-pc-windows-gnu","ecosystem":"cargo","requirements":"0.4.0","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"cargo","filepath":"syft/pkg/cataloger/rust/test-fixtures/glob-paths/src/Cargo.lock","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:10:07.274Z","updated_at":"2023-09-21T17:10:07.274Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/rust/test-fixtures/glob-paths/src/Cargo.lock","dependencies":[]},{"ecosystem":"cocoapods","filepath":"syft/pkg/cataloger/swift/test-fixtures/Podfile.lock","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:10:07.993Z","updated_at":"2023-09-21T17:10:07.993Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/swift/test-fixtures/Podfile.lock","dependencies":[{"id":13854476278,"package_name":"GlossButtonNode","ecosystem":"cocoapods","requirements":"3.1.2","direct":false,"kind":"runtime","optional":false},{"id":13854476279,"package_name":"PINCache","ecosystem":"cocoapods","requirements":"3.0.3","direct":false,"kind":"runtime","optional":false},{"id":13854476280,"package_name":"PINOperation","ecosystem":"cocoapods","requirements":"1.2.1","direct":false,"kind":"runtime","optional":false},{"id":13854476281,"package_name":"PINRemoteImage","ecosystem":"cocoapods","requirements":"3.0.3","direct":false,"kind":"runtime","optional":false},{"id":13854476282,"package_name":"Reveal-SDK","ecosystem":"cocoapods","requirements":"33","direct":false,"kind":"runtime","optional":false},{"id":13854476283,"package_name":"SwiftGen","ecosystem":"cocoapods","requirements":"6.5.1","direct":false,"kind":"runtime","optional":false},{"id":13854476284,"package_name":"Texture","ecosystem":"cocoapods","requirements":"3.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854476290,"package_name":"TextureSwiftSupport","ecosystem":"cocoapods","requirements":"3.13.0","direct":false,"kind":"runtime","optional":false},{"id":13854476291,"package_name":"TinyConstraints","ecosystem":"cocoapods","requirements":"4.0.2","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"cocoapods","filepath":"syft/pkg/cataloger/swift/test-fixtures/glob-paths/src/Podfile.lock","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:10:08.962Z","updated_at":"2023-09-21T17:10:08.962Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/swift/test-fixtures/glob-paths/src/Podfile.lock","dependencies":[]},{"ecosystem":"cran","filepath":"syft/pkg/cataloger/r/test-fixtures/DESCRIPTION","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:10.029Z","updated_at":"2023-09-21T17:10:10.029Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/r/test-fixtures/DESCRIPTION","dependencies":[{"id":13854479159,"package_name":"R","ecosystem":"cran","requirements":"\u003e= 3.3","direct":true,"kind":"depends","optional":false},{"id":13854479163,"package_name":"cli","ecosystem":"cran","requirements":"*","direct":true,"kind":"imports","optional":false},{"id":13854479168,"package_name":"glue","ecosystem":"cran","requirements":"\u003e= 1.6.1","direct":true,"kind":"imports","optional":false},{"id":13854479171,"package_name":"lifecycle","ecosystem":"cran","requirements":"\u003e= 1.0.3","direct":true,"kind":"imports","optional":false},{"id":13854479174,"package_name":"magrittr","ecosystem":"cran","requirements":"*","direct":true,"kind":"imports","optional":false},{"id":13854479195,"package_name":"rlang","ecosystem":"cran","requirements":"\u003e= 1.0.0","direct":true,"kind":"imports","optional":false},{"id":13854479196,"package_name":"stringi","ecosystem":"cran","requirements":"\u003e= 1.5.3","direct":true,"kind":"imports","optional":false},{"id":13854479197,"package_name":"vctrs","ecosystem":"cran","requirements":"\u003e= 0.4.0","direct":true,"kind":"imports","optional":false},{"id":13854479198,"package_name":"covr","ecosystem":"cran","requirements":"*","direct":true,"kind":"suggests","optional":false},{"id":13854479199,"package_name":"dplyr","ecosystem":"cran","requirements":"*","direct":true,"kind":"suggests","optional":false},{"id":13854479200,"package_name":"gt","ecosystem":"cran","requirements":"*","direct":true,"kind":"suggests","optional":false},{"id":13854479201,"package_name":"htmltools","ecosystem":"cran","requirements":"*","direct":true,"kind":"suggests","optional":false},{"id":13854479202,"package_name":"htmlwidgets","ecosystem":"cran","requirements":"*","direct":true,"kind":"suggests","optional":false},{"id":13854479203,"package_name":"knitr","ecosystem":"cran","requirements":"*","direct":true,"kind":"suggests","optional":false},{"id":13854479204,"package_name":"rmarkdown","ecosystem":"cran","requirements":"*","direct":true,"kind":"suggests","optional":false},{"id":13854479205,"package_name":"testthat","ecosystem":"cran","requirements":"\u003e= 3.0.0","direct":true,"kind":"suggests","optional":false},{"id":13854479206,"package_name":"tibble","ecosystem":"cran","requirements":"*","direct":true,"kind":"suggests","optional":false}]},{"ecosystem":"cran","filepath":"syft/pkg/cataloger/r/test-fixtures/installed/base/DESCRIPTION","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:10.444Z","updated_at":"2023-09-21T17:10:10.444Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/r/test-fixtures/installed/base/DESCRIPTION","dependencies":[{"id":13854480165,"package_name":"methods","ecosystem":"cran","requirements":"*","direct":true,"kind":"suggests","optional":false}]},{"ecosystem":"cran","filepath":"syft/pkg/cataloger/r/test-fixtures/installed/stringr/DESCRIPTION","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:11.082Z","updated_at":"2023-09-21T17:10:11.082Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/r/test-fixtures/installed/stringr/DESCRIPTION","dependencies":[{"id":13854480257,"package_name":"R","ecosystem":"cran","requirements":"\u003e= 3.3","direct":true,"kind":"depends","optional":false},{"id":13854480258,"package_name":"cli","ecosystem":"cran","requirements":"*","direct":true,"kind":"imports","optional":false},{"id":13854480259,"package_name":"glue","ecosystem":"cran","requirements":"\u003e= 1.6.1","direct":true,"kind":"imports","optional":false},{"id":13854480260,"package_name":"lifecycle","ecosystem":"cran","requirements":"\u003e= 1.0.3","direct":true,"kind":"imports","optional":false},{"id":13854480261,"package_name":"magrittr","ecosystem":"cran","requirements":"*","direct":true,"kind":"imports","optional":false},{"id":13854480262,"package_name":"rlang","ecosystem":"cran","requirements":"\u003e= 1.0.0","direct":true,"kind":"imports","optional":false},{"id":13854480263,"package_name":"stringi","ecosystem":"cran","requirements":"\u003e= 1.5.3","direct":true,"kind":"imports","optional":false},{"id":13854480264,"package_name":"vctrs","ecosystem":"cran","requirements":"\u003e= 0.4.0","direct":true,"kind":"imports","optional":false},{"id":13854480265,"package_name":"covr","ecosystem":"cran","requirements":"*","direct":true,"kind":"suggests","optional":false},{"id":13854480266,"package_name":"dplyr","ecosystem":"cran","requirements":"*","direct":true,"kind":"suggests","optional":false},{"id":13854480267,"package_name":"gt","ecosystem":"cran","requirements":"*","direct":true,"kind":"suggests","optional":false},{"id":13854480268,"package_name":"htmltools","ecosystem":"cran","requirements":"*","direct":true,"kind":"suggests","optional":false},{"id":13854480269,"package_name":"htmlwidgets","ecosystem":"cran","requirements":"*","direct":true,"kind":"suggests","optional":false},{"id":13854480270,"package_name":"knitr","ecosystem":"cran","requirements":"*","direct":true,"kind":"suggests","optional":false},{"id":13854480271,"package_name":"rmarkdown","ecosystem":"cran","requirements":"*","direct":true,"kind":"suggests","optional":false},{"id":13854480272,"package_name":"testthat","ecosystem":"cran","requirements":"\u003e= 3.0.0","direct":true,"kind":"suggests","optional":false},{"id":13854480273,"package_name":"tibble","ecosystem":"cran","requirements":"*","direct":true,"kind":"suggests","optional":false}]},{"ecosystem":"docker","filepath":"Dockerfile","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:11.838Z","updated_at":"2023-09-21T17:10:11.838Z","repository_link":"https://github.com/anchore/syft/blob/main/Dockerfile","dependencies":[{"id":13854481438,"package_name":"gcr.io/distroless/static-debian11","ecosystem":"docker","requirements":"debug@sha256","direct":true,"kind":"build","optional":false},{"id":13854481439,"package_name":"scratch","ecosystem":"docker","requirements":"latest","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"syft/file/cataloger/filedigest/test-fixtures/image-file-type-mix/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:13.000Z","updated_at":"2023-09-21T17:10:13.000Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/file/cataloger/filedigest/test-fixtures/image-file-type-mix/Dockerfile","dependencies":[{"id":13854481909,"package_name":"busybox","ecosystem":"docker","requirements":"1.28.1@sha256","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"syft/file/cataloger/filemetadata/test-fixtures/image-file-type-mix/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:18.213Z","updated_at":"2023-09-21T17:10:18.213Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/file/cataloger/filemetadata/test-fixtures/image-file-type-mix/Dockerfile","dependencies":[{"id":13854483055,"package_name":"busybox","ecosystem":"docker","requirements":"1.28.1@sha256","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"syft/file/cataloger/internal/test-fixtures/image-file-type-mix/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:18.367Z","updated_at":"2023-09-21T17:10:18.367Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/file/cataloger/internal/test-fixtures/image-file-type-mix/Dockerfile","dependencies":[{"id":13854483223,"package_name":"busybox","ecosystem":"docker","requirements":"1.28.1@sha256","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"syft/internal/fileresolver/test-fixtures/image-duplicate-path/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:19.510Z","updated_at":"2023-09-21T17:10:19.510Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/internal/fileresolver/test-fixtures/image-duplicate-path/Dockerfile","dependencies":[{"id":13854484076,"package_name":"scratch","ecosystem":"docker","requirements":"latest","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"syft/internal/fileresolver/test-fixtures/image-files-deleted/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:19.682Z","updated_at":"2023-09-21T17:10:19.682Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/internal/fileresolver/test-fixtures/image-files-deleted/Dockerfile","dependencies":[{"id":13854484091,"package_name":"alpine","ecosystem":"docker","requirements":"3.17.1@sha256","direct":true,"kind":"build","optional":false},{"id":13854484092,"package_name":"scratch","ecosystem":"docker","requirements":"latest","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"syft/internal/fileresolver/test-fixtures/image-simple/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:20.106Z","updated_at":"2023-09-21T17:10:20.106Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/internal/fileresolver/test-fixtures/image-simple/Dockerfile","dependencies":[{"id":13854484094,"package_name":"scratch","ecosystem":"docker","requirements":"latest","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"syft/internal/fileresolver/test-fixtures/image-symlinks/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:21.312Z","updated_at":"2023-09-21T17:10:21.312Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/internal/fileresolver/test-fixtures/image-symlinks/Dockerfile","dependencies":[{"id":13854485623,"package_name":"busybox","ecosystem":"docker","requirements":"1.34.0@sha256","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"syft/pkg/cataloger/binary/test-fixtures/image-busybox/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:21.399Z","updated_at":"2023-09-21T17:10:21.399Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/binary/test-fixtures/image-busybox/Dockerfile","dependencies":[{"id":13854485878,"package_name":"busybox","ecosystem":"docker","requirements":"1.35@sha256","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"syft/pkg/cataloger/kernel/test-fixtures/image-kernel-and-modules/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:23.849Z","updated_at":"2023-09-21T17:10:23.849Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/kernel/test-fixtures/image-kernel-and-modules/Dockerfile","dependencies":[{"id":13854487473,"package_name":"fedora","ecosystem":"docker","requirements":"37@sha256","direct":true,"kind":"build","optional":false},{"id":13854487474,"package_name":"scratch","ecosystem":"docker","requirements":"latest","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:24.440Z","updated_at":"2023-09-21T17:10:24.440Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/rust/test-fixtures/image-audit/Dockerfile","dependencies":[{"id":13854487490,"package_name":"docker.io/tofay/hello-rust-auditable","ecosystem":"docker","requirements":"latest@sha256","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"syft/source/test-fixtures/image-simple/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:24.581Z","updated_at":"2023-09-21T17:10:24.581Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/source/test-fixtures/image-simple/Dockerfile","dependencies":[{"id":13854487520,"package_name":"scratch","ecosystem":"docker","requirements":"latest","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"test/cli/test-fixtures/image-bad-binaries/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:24.618Z","updated_at":"2023-09-21T17:10:24.618Z","repository_link":"https://github.com/anchore/syft/blob/main/test/cli/test-fixtures/image-bad-binaries/Dockerfile","dependencies":[{"id":13854487537,"package_name":"debian","ecosystem":"docker","requirements":"sid@sha256","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"test/cli/test-fixtures/image-hidden-packages/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:24.680Z","updated_at":"2023-09-21T17:10:24.680Z","repository_link":"https://github.com/anchore/syft/blob/main/test/cli/test-fixtures/image-hidden-packages/Dockerfile","dependencies":[{"id":13854487587,"package_name":"centos","ecosystem":"docker","requirements":"7.9.2009@sha256","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"test/cli/test-fixtures/image-java-spdx-tools/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:24.752Z","updated_at":"2023-09-21T17:10:24.752Z","repository_link":"https://github.com/anchore/syft/blob/main/test/cli/test-fixtures/image-java-spdx-tools/Dockerfile","dependencies":[{"id":13854487839,"package_name":"openjdk","ecosystem":"docker","requirements":"11@sha256","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"test/cli/test-fixtures/image-node-binary/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:24.860Z","updated_at":"2023-09-21T17:10:24.860Z","repository_link":"https://github.com/anchore/syft/blob/main/test/cli/test-fixtures/image-node-binary/Dockerfile","dependencies":[{"id":13854487892,"package_name":"node","ecosystem":"docker","requirements":"19-alpine3.15@sha256","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"test/cli/test-fixtures/registry/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:25.257Z","updated_at":"2023-09-21T17:10:25.257Z","repository_link":"https://github.com/anchore/syft/blob/main/test/cli/test-fixtures/registry/Dockerfile","dependencies":[{"id":13854488109,"package_name":"alpine@sha256","ecosystem":"docker","requirements":"c5c5fda71656f28e49ac9c5416b3643eaa6a108a8093151d6d1afc9463be8e33","direct":true,"kind":"build","optional":false}]},{"ecosystem":"go","filepath":"go.mod","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:36.648Z","updated_at":"2023-09-21T17:10:36.648Z","repository_link":"https://github.com/anchore/syft/blob/main/go.mod","dependencies":[{"id":13854490277,"package_name":"github.com/CycloneDX/cyclonedx-go","ecosystem":"go","requirements":"v0.7.2","direct":true,"kind":"runtime","optional":false},{"id":13854490278,"package_name":"github.com/Masterminds/semver","ecosystem":"go","requirements":"v1.5.0","direct":true,"kind":"runtime","optional":false},{"id":13854490279,"package_name":"github.com/Masterminds/sprig/v3","ecosystem":"go","requirements":"v3.2.3","direct":true,"kind":"runtime","optional":false},{"id":13854490280,"package_name":"github.com/acarl005/stripansi","ecosystem":"go","requirements":"v0.0.0-20180116102854-5a71ef0e047d","direct":true,"kind":"runtime","optional":false},{"id":13854490281,"package_name":"github.com/acobaugh/osrelease","ecosystem":"go","requirements":"v0.1.0","direct":true,"kind":"runtime","optional":false},{"id":13854490287,"package_name":"github.com/anchore/bubbly","ecosystem":"go","requirements":"v0.0.0-20230801194016-acdb4981b461","direct":true,"kind":"runtime","optional":false},{"id":13854490485,"package_name":"github.com/anchore/clio","ecosystem":"go","requirements":"v0.0.0-20230823172630-c42d666061af","direct":true,"kind":"runtime","optional":false},{"id":13854490486,"package_name":"github.com/anchore/fangs","ecosystem":"go","requirements":"v0.0.0-20230818131516-2186b10924fe","direct":true,"kind":"runtime","optional":false},{"id":13854490487,"package_name":"github.com/anchore/go-logger","ecosystem":"go","requirements":"v0.0.0-20230725134548-c21dafa1ec5a","direct":true,"kind":"runtime","optional":false},{"id":13854490488,"package_name":"github.com/anchore/go-macholibre","ecosystem":"go","requirements":"v0.0.0-20220308212642-53e6d0aaf6fb","direct":true,"kind":"runtime","optional":false},{"id":13854490489,"package_name":"github.com/anchore/go-testutils","ecosystem":"go","requirements":"v0.0.0-20200925183923-d5f45b0d3c04","direct":true,"kind":"runtime","optional":false},{"id":13854490492,"package_name":"github.com/anchore/go-version","ecosystem":"go","requirements":"v1.2.2-0.20200701162849-18adb9c92b9b","direct":true,"kind":"runtime","optional":false},{"id":13854490493,"package_name":"github.com/anchore/packageurl-go","ecosystem":"go","requirements":"v0.1.1-0.20230104203445-02e0a6721501","direct":true,"kind":"runtime","optional":false},{"id":13854490494,"package_name":"github.com/anchore/stereoscope","ecosystem":"go","requirements":"v0.0.0-20230919183137-5841b53a0375","direct":true,"kind":"runtime","optional":false},{"id":13854490495,"package_name":"github.com/aquasecurity/go-pep440-version","ecosystem":"go","requirements":"v0.0.0-20210121094942-22b2f8951d46","direct":true,"kind":"runtime","optional":false},{"id":13854490496,"package_name":"github.com/bmatcuk/doublestar/v4","ecosystem":"go","requirements":"v4.6.0","direct":true,"kind":"runtime","optional":false},{"id":13854490497,"package_name":"github.com/charmbracelet/bubbletea","ecosystem":"go","requirements":"v0.24.2","direct":true,"kind":"runtime","optional":false},{"id":13854490498,"package_name":"github.com/charmbracelet/lipgloss","ecosystem":"go","requirements":"v0.8.0","direct":true,"kind":"runtime","optional":false},{"id":13854490499,"package_name":"github.com/dave/jennifer","ecosystem":"go","requirements":"v1.7.0","direct":true,"kind":"runtime","optional":false},{"id":13854490500,"package_name":"github.com/deitch/magic","ecosystem":"go","requirements":"v0.0.0-20230404182410-1ff89d7342da","direct":true,"kind":"runtime","optional":false},{"id":13854490501,"package_name":"github.com/docker/distribution","ecosystem":"go","requirements":"v2.8.2+incompatible","direct":true,"kind":"runtime","optional":false},{"id":13854490502,"package_name":"github.com/docker/docker","ecosystem":"go","requirements":"v24.0.6+incompatible","direct":true,"kind":"runtime","optional":false},{"id":13854490503,"package_name":"github.com/dustin/go-humanize","ecosystem":"go","requirements":"v1.0.1","direct":true,"kind":"runtime","optional":false},{"id":13854490504,"package_name":"github.com/facebookincubator/nvdtools","ecosystem":"go","requirements":"v0.1.5","direct":true,"kind":"runtime","optional":false},{"id":13854490505,"package_name":"github.com/github/go-spdx/v2","ecosystem":"go","requirements":"v2.2.0","direct":true,"kind":"runtime","optional":false},{"id":13854490506,"package_name":"github.com/gkampitakis/go-snaps","ecosystem":"go","requirements":"v0.4.10","direct":true,"kind":"runtime","optional":false},{"id":13854490507,"package_name":"github.com/go-git/go-billy/v5","ecosystem":"go","requirements":"v5.5.0","direct":true,"kind":"runtime","optional":false},{"id":13854490508,"package_name":"github.com/go-git/go-git/v5","ecosystem":"go","requirements":"v5.9.0","direct":true,"kind":"runtime","optional":false},{"id":13854490509,"package_name":"github.com/go-test/deep","ecosystem":"go","requirements":"v1.1.0","direct":true,"kind":"runtime","optional":false},{"id":13854490510,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.9","direct":true,"kind":"runtime","optional":false},{"id":13854490511,"package_name":"github.com/google/go-containerregistry","ecosystem":"go","requirements":"v0.16.1","direct":true,"kind":"runtime","optional":false},{"id":13854490512,"package_name":"github.com/google/licensecheck","ecosystem":"go","requirements":"v0.3.1","direct":true,"kind":"runtime","optional":false},{"id":13854490513,"package_name":"github.com/google/uuid","ecosystem":"go","requirements":"v1.3.1","direct":true,"kind":"runtime","optional":false},{"id":13854490514,"package_name":"github.com/gookit/color","ecosystem":"go","requirements":"v1.5.4","direct":true,"kind":"runtime","optional":false},{"id":13854490515,"package_name":"github.com/hashicorp/go-multierror","ecosystem":"go","requirements":"v1.1.1","direct":true,"kind":"runtime","optional":false},{"id":13854490516,"package_name":"github.com/iancoleman/strcase","ecosystem":"go","requirements":"v0.3.0","direct":true,"kind":"runtime","optional":false},{"id":13854490517,"package_name":"github.com/invopop/jsonschema","ecosystem":"go","requirements":"v0.7.0","direct":true,"kind":"runtime","optional":false},{"id":13854490518,"package_name":"github.com/jinzhu/copier","ecosystem":"go","requirements":"v0.4.0","direct":true,"kind":"runtime","optional":false},{"id":13854490519,"package_name":"github.com/kastenhq/goversion","ecosystem":"go","requirements":"v0.0.0-20230811215019-93b2f8823953","direct":true,"kind":"runtime","optional":false},{"id":13854490520,"package_name":"github.com/knqyf263/go-rpmdb","ecosystem":"go","requirements":"v0.0.0-20230301153543-ba94b245509b","direct":true,"kind":"runtime","optional":false},{"id":13854490521,"package_name":"github.com/mholt/archiver/v3","ecosystem":"go","requirements":"v3.5.1","direct":true,"kind":"runtime","optional":false},{"id":13854490522,"package_name":"github.com/microsoft/go-rustaudit","ecosystem":"go","requirements":"v0.0.0-20220730194248-4b17361d90a5","direct":true,"kind":"runtime","optional":false},{"id":13854490523,"package_name":"github.com/mitchellh/go-homedir","ecosystem":"go","requirements":"v1.1.0","direct":true,"kind":"runtime","optional":false},{"id":13854490524,"package_name":"github.com/mitchellh/hashstructure/v2","ecosystem":"go","requirements":"v2.0.2","direct":true,"kind":"runtime","optional":false},{"id":13854490525,"package_name":"github.com/mitchellh/mapstructure","ecosystem":"go","requirements":"v1.5.0","direct":true,"kind":"runtime","optional":false},{"id":13854490526,"package_name":"github.com/olekukonko/tablewriter","ecosystem":"go","requirements":"v0.0.5","direct":true,"kind":"runtime","optional":false},{"id":13854490527,"package_name":"github.com/opencontainers/go-digest","ecosystem":"go","requirements":"v1.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854490528,"package_name":"github.com/pelletier/go-toml","ecosystem":"go","requirements":"v1.9.5","direct":true,"kind":"runtime","optional":false},{"id":13854490529,"package_name":"github.com/saferwall/pe","ecosystem":"go","requirements":"v1.4.5","direct":true,"kind":"runtime","optional":false},{"id":13854490540,"package_name":"github.com/saintfish/chardet","ecosystem":"go","requirements":"v0.0.0-20230101081208-5e3ef4b5456d","direct":true,"kind":"runtime","optional":false},{"id":13854490541,"package_name":"github.com/sassoftware/go-rpmutils","ecosystem":"go","requirements":"v0.2.0","direct":true,"kind":"runtime","optional":false},{"id":13854490542,"package_name":"github.com/scylladb/go-set","ecosystem":"go","requirements":"v1.0.3-0.20200225121959-cc7b2070d91e","direct":true,"kind":"runtime","optional":false},{"id":13854490543,"package_name":"github.com/sergi/go-diff","ecosystem":"go","requirements":"v1.3.1","direct":true,"kind":"runtime","optional":false},{"id":13854490544,"package_name":"github.com/spdx/tools-golang","ecosystem":"go","requirements":"v0.5.3","direct":true,"kind":"runtime","optional":false},{"id":13854490545,"package_name":"github.com/spf13/afero","ecosystem":"go","requirements":"v1.9.5","direct":true,"kind":"runtime","optional":false},{"id":13854490546,"package_name":"github.com/spf13/cobra","ecosystem":"go","requirements":"v1.7.0","direct":true,"kind":"runtime","optional":false},{"id":13854490547,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.8.4","direct":true,"kind":"runtime","optional":false},{"id":13854490548,"package_name":"github.com/vbatts/go-mtree","ecosystem":"go","requirements":"v0.5.3","direct":true,"kind":"runtime","optional":false},{"id":13854490551,"package_name":"github.com/vifraa/gopom","ecosystem":"go","requirements":"v1.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854490564,"package_name":"github.com/wagoodman/go-partybus","ecosystem":"go","requirements":"v0.0.0-20230516145632-8ccac152c651","direct":true,"kind":"runtime","optional":false},{"id":13854490565,"package_name":"github.com/wagoodman/go-progress","ecosystem":"go","requirements":"v0.0.0-20230911172108-cf810b7e365c","direct":true,"kind":"runtime","optional":false},{"id":13854490590,"package_name":"github.com/xeipuuv/gojsonschema","ecosystem":"go","requirements":"v1.2.0","direct":true,"kind":"runtime","optional":false},{"id":13854490591,"package_name":"github.com/zyedidia/generic","ecosystem":"go","requirements":"v1.2.2-0.20230320175451-4410d2372cb1","direct":true,"kind":"runtime","optional":false},{"id":13854490592,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.12.0","direct":true,"kind":"runtime","optional":false},{"id":13854490593,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.15.0","direct":true,"kind":"runtime","optional":false},{"id":13854490594,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.12.0","direct":true,"kind":"runtime","optional":false},{"id":13854490595,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.1","direct":true,"kind":"runtime","optional":false},{"id":13854490596,"package_name":"modernc.org/sqlite","ecosystem":"go","requirements":"v1.25.0","direct":true,"kind":"runtime","optional":false},{"id":13854490597,"package_name":"github.com/sanity-io/litter","ecosystem":"go","requirements":"v1.5.5","direct":true,"kind":"runtime","optional":false},{"id":13854490598,"package_name":"dario.cat/mergo","ecosystem":"go","requirements":"v1.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854490599,"package_name":"github.com/AdaLogics/go-fuzz-headers","ecosystem":"go","requirements":"v0.0.0-20230106234847-43070de90fa1","direct":true,"kind":"runtime","optional":false},{"id":13854490600,"package_name":"github.com/AdamKorcz/go-118-fuzz-build","ecosystem":"go","requirements":"v0.0.0-20221215162035-5330a85ea652","direct":true,"kind":"runtime","optional":false},{"id":13854490604,"package_name":"github.com/Azure/go-ansiterm","ecosystem":"go","requirements":"v0.0.0-20210617225240-d185dfc1b5a1","direct":true,"kind":"runtime","optional":false},{"id":13854490605,"package_name":"github.com/DataDog/zstd","ecosystem":"go","requirements":"v1.4.5","direct":true,"kind":"runtime","optional":false},{"id":13854490606,"package_name":"github.com/Masterminds/goutils","ecosystem":"go","requirements":"v1.1.1","direct":true,"kind":"runtime","optional":false},{"id":13854490607,"package_name":"github.com/Masterminds/semver/v3","ecosystem":"go","requirements":"v3.2.0","direct":true,"kind":"runtime","optional":false},{"id":13854490608,"package_name":"github.com/Microsoft/go-winio","ecosystem":"go","requirements":"v0.6.1","direct":true,"kind":"runtime","optional":false},{"id":13854490609,"package_name":"github.com/Microsoft/hcsshim","ecosystem":"go","requirements":"v0.10.0-rc.7","direct":true,"kind":"runtime","optional":false},{"id":13854490610,"package_name":"github.com/ProtonMail/go-crypto","ecosystem":"go","requirements":"v0.0.0-20230828082145-3c4c8a2d2371","direct":true,"kind":"runtime","optional":false},{"id":13854490611,"package_name":"github.com/acomagu/bufpipe","ecosystem":"go","requirements":"v1.0.4","direct":true,"kind":"runtime","optional":false},{"id":13854490612,"package_name":"github.com/adrg/xdg","ecosystem":"go","requirements":"v0.4.0","direct":true,"kind":"runtime","optional":false},{"id":13854490613,"package_name":"github.com/anchore/go-struct-converter","ecosystem":"go","requirements":"v0.0.0-20221118182256-c68fdcfa2092","direct":true,"kind":"runtime","optional":false},{"id":13854490618,"package_name":"github.com/andybalholm/brotli","ecosystem":"go","requirements":"v1.0.4","direct":true,"kind":"runtime","optional":false},{"id":13854490619,"package_name":"github.com/aquasecurity/go-version","ecosystem":"go","requirements":"v0.0.0-20210121072130-637058cfe492","direct":true,"kind":"runtime","optional":false},{"id":13854490620,"package_name":"github.com/aymanbagabas/go-osc52/v2","ecosystem":"go","requirements":"v2.0.1","direct":true,"kind":"runtime","optional":false},{"id":13854490621,"package_name":"github.com/becheran/wildmatch-go","ecosystem":"go","requirements":"v1.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854490622,"package_name":"github.com/charmbracelet/bubbles","ecosystem":"go","requirements":"v0.16.1","direct":true,"kind":"runtime","optional":false},{"id":13854490623,"package_name":"github.com/charmbracelet/harmonica","ecosystem":"go","requirements":"v0.2.0","direct":true,"kind":"runtime","optional":false},{"id":13854490624,"package_name":"github.com/cloudflare/circl","ecosystem":"go","requirements":"v1.3.3","direct":true,"kind":"runtime","optional":false},{"id":13854490625,"package_name":"github.com/containerd/cgroups","ecosystem":"go","requirements":"v1.1.0","direct":true,"kind":"runtime","optional":false},{"id":13854490626,"package_name":"github.com/containerd/console","ecosystem":"go","requirements":"v1.0.4-0.20230313162750-1ae8d489ac81","direct":true,"kind":"runtime","optional":false},{"id":13854490627,"package_name":"github.com/containerd/containerd","ecosystem":"go","requirements":"v1.7.0","direct":true,"kind":"runtime","optional":false},{"id":13854490628,"package_name":"github.com/containerd/continuity","ecosystem":"go","requirements":"v0.3.0","direct":true,"kind":"runtime","optional":false},{"id":13854490629,"package_name":"github.com/containerd/fifo","ecosystem":"go","requirements":"v1.1.0","direct":true,"kind":"runtime","optional":false},{"id":13854490630,"package_name":"github.com/containerd/stargz-snapshotter/estargz","ecosystem":"go","requirements":"v0.14.3","direct":true,"kind":"runtime","optional":false},{"id":13854490631,"package_name":"github.com/containerd/ttrpc","ecosystem":"go","requirements":"v1.2.1","direct":true,"kind":"runtime","optional":false},{"id":13854490632,"package_name":"github.com/containerd/typeurl/v2","ecosystem":"go","requirements":"v2.1.0","direct":true,"kind":"runtime","optional":false},{"id":13854490633,"package_name":"github.com/cyphar/filepath-securejoin","ecosystem":"go","requirements":"v0.2.4","direct":true,"kind":"runtime","optional":false},{"id":13854490634,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.1","direct":true,"kind":"runtime","optional":false},{"id":13854490635,"package_name":"github.com/docker/cli","ecosystem":"go","requirements":"v24.0.0+incompatible","direct":true,"kind":"runtime","optional":false},{"id":13854490636,"package_name":"github.com/docker/docker-credential-helpers","ecosystem":"go","requirements":"v0.7.0","direct":true,"kind":"runtime","optional":false},{"id":13854490637,"package_name":"github.com/docker/go-connections","ecosystem":"go","requirements":"v0.4.0","direct":true,"kind":"runtime","optional":false},{"id":13854490638,"package_name":"github.com/docker/go-events","ecosystem":"go","requirements":"v0.0.0-20190806004212-e31b211e4f1c","direct":true,"kind":"runtime","optional":false},{"id":13854490639,"package_name":"github.com/docker/go-units","ecosystem":"go","requirements":"v0.5.0","direct":true,"kind":"runtime","optional":false},{"id":13854490640,"package_name":"github.com/dsnet/compress","ecosystem":"go","requirements":"v0.0.2-0.20210315054119-f66993602bf5","direct":true,"kind":"runtime","optional":false},{"id":13854490650,"package_name":"github.com/edsrzf/mmap-go","ecosystem":"go","requirements":"v1.1.0","direct":true,"kind":"runtime","optional":false},{"id":13854490651,"package_name":"github.com/emirpasic/gods","ecosystem":"go","requirements":"v1.18.1","direct":true,"kind":"runtime","optional":false},{"id":13854490652,"package_name":"github.com/felixge/fgprof","ecosystem":"go","requirements":"v0.9.3","direct":true,"kind":"runtime","optional":false},{"id":13854490653,"package_name":"github.com/fsnotify/fsnotify","ecosystem":"go","requirements":"v1.6.0","direct":true,"kind":"runtime","optional":false},{"id":13854490654,"package_name":"github.com/gabriel-vasile/mimetype","ecosystem":"go","requirements":"v1.4.0","direct":true,"kind":"runtime","optional":false},{"id":13854490655,"package_name":"github.com/gkampitakis/ciinfo","ecosystem":"go","requirements":"v0.2.5","direct":true,"kind":"runtime","optional":false},{"id":13854490656,"package_name":"github.com/gkampitakis/go-diff","ecosystem":"go","requirements":"v1.3.2","direct":true,"kind":"runtime","optional":false},{"id":13854490657,"package_name":"github.com/go-git/gcfg","ecosystem":"go","requirements":"v1.5.1-0.20230307220236-3a3c6141e376","direct":true,"kind":"runtime","optional":false},{"id":13854490658,"package_name":"github.com/go-logr/logr","ecosystem":"go","requirements":"v1.2.3","direct":true,"kind":"runtime","optional":false},{"id":13854490659,"package_name":"github.com/go-logr/stdr","ecosystem":"go","requirements":"v1.2.2","direct":true,"kind":"runtime","optional":false},{"id":13854490660,"package_name":"github.com/go-restruct/restruct","ecosystem":"go","requirements":"v1.2.0-alpha","direct":true,"kind":"runtime","optional":false},{"id":13854490661,"package_name":"github.com/gogo/protobuf","ecosystem":"go","requirements":"v1.3.2","direct":true,"kind":"runtime","optional":false},{"id":13854490662,"package_name":"github.com/golang/groupcache","ecosystem":"go","requirements":"v0.0.0-20210331224755-41bb18bfe9da","direct":true,"kind":"runtime","optional":false},{"id":13854490663,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.3","direct":true,"kind":"runtime","optional":false},{"id":13854490664,"package_name":"github.com/golang/snappy","ecosystem":"go","requirements":"v0.0.4","direct":true,"kind":"runtime","optional":false},{"id":13854490665,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20221118152302-e6195bd50e26","direct":true,"kind":"runtime","optional":false},{"id":13854490666,"package_name":"github.com/hashicorp/errwrap","ecosystem":"go","requirements":"v1.1.0","direct":true,"kind":"runtime","optional":false},{"id":13854490667,"package_name":"github.com/hashicorp/hcl","ecosystem":"go","requirements":"v1.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854490668,"package_name":"github.com/huandu/xstrings","ecosystem":"go","requirements":"v1.3.3","direct":true,"kind":"runtime","optional":false},{"id":13854490669,"package_name":"github.com/iancoleman/orderedmap","ecosystem":"go","requirements":"v0.0.0-20190318233801-ac98e3ecb4b0","direct":true,"kind":"runtime","optional":false},{"id":13854490670,"package_name":"github.com/imdario/mergo","ecosystem":"go","requirements":"v0.3.15","direct":true,"kind":"runtime","optional":false},{"id":13854490671,"package_name":"github.com/inconshreveable/mousetrap","ecosystem":"go","requirements":"v1.1.0","direct":true,"kind":"runtime","optional":false},{"id":13854490672,"package_name":"github.com/jbenet/go-context","ecosystem":"go","requirements":"v0.0.0-20150711004518-d14ea06fba99","direct":true,"kind":"runtime","optional":false},{"id":13854490673,"package_name":"github.com/kballard/go-shellquote","ecosystem":"go","requirements":"v0.0.0-20180428030007-95032a82bc51","direct":true,"kind":"runtime","optional":false},{"id":13854490674,"package_name":"github.com/kevinburke/ssh_config","ecosystem":"go","requirements":"v1.2.0","direct":true,"kind":"runtime","optional":false},{"id":13854490675,"package_name":"github.com/klauspost/compress","ecosystem":"go","requirements":"v1.16.5","direct":true,"kind":"runtime","optional":false},{"id":13854490676,"package_name":"github.com/klauspost/pgzip","ecosystem":"go","requirements":"v1.2.5","direct":true,"kind":"runtime","optional":false},{"id":13854490677,"package_name":"github.com/kr/pretty","ecosystem":"go","requirements":"v0.3.1","direct":true,"kind":"runtime","optional":false},{"id":13854490678,"package_name":"github.com/kr/text","ecosystem":"go","requirements":"v0.2.0","direct":true,"kind":"runtime","optional":false},{"id":13854490679,"package_name":"github.com/logrusorgru/aurora","ecosystem":"go","requirements":"v0.0.0-20200102142835-e9ef32dff381","direct":true,"kind":"runtime","optional":false},{"id":13854490680,"package_name":"github.com/lucasb-eyer/go-colorful","ecosystem":"go","requirements":"v1.2.0","direct":true,"kind":"runtime","optional":false},{"id":13854490681,"package_name":"github.com/magiconair/properties","ecosystem":"go","requirements":"v1.8.7","direct":true,"kind":"runtime","optional":false},{"id":13854490682,"package_name":"github.com/mattn/go-colorable","ecosystem":"go","requirements":"v0.1.13","direct":true,"kind":"runtime","optional":false},{"id":13854490683,"package_name":"github.com/mattn/go-isatty","ecosystem":"go","requirements":"v0.0.18","direct":true,"kind":"runtime","optional":false},{"id":13854490684,"package_name":"github.com/mattn/go-localereader","ecosystem":"go","requirements":"v0.0.2-0.20220822084749-2491eb6c1c75","direct":true,"kind":"runtime","optional":false},{"id":13854490685,"package_name":"github.com/mattn/go-runewidth","ecosystem":"go","requirements":"v0.0.14","direct":true,"kind":"runtime","optional":false},{"id":13854490686,"package_name":"github.com/mgutz/ansi","ecosystem":"go","requirements":"v0.0.0-20200706080929-d51e80ef957d","direct":true,"kind":"runtime","optional":false},{"id":13854490687,"package_name":"github.com/mitchellh/copystructure","ecosystem":"go","requirements":"v1.2.0","direct":true,"kind":"runtime","optional":false},{"id":13854490688,"package_name":"github.com/mitchellh/reflectwalk","ecosystem":"go","requirements":"v1.0.2","direct":true,"kind":"runtime","optional":false},{"id":13854490689,"package_name":"github.com/moby/locker","ecosystem":"go","requirements":"v1.0.1","direct":true,"kind":"runtime","optional":false},{"id":13854490690,"package_name":"github.com/moby/sys/mountinfo","ecosystem":"go","requirements":"v0.6.2","direct":true,"kind":"runtime","optional":false},{"id":13854490691,"package_name":"github.com/moby/sys/sequential","ecosystem":"go","requirements":"v0.5.0","direct":true,"kind":"runtime","optional":false},{"id":13854490692,"package_name":"github.com/moby/sys/signal","ecosystem":"go","requirements":"v0.7.0","direct":true,"kind":"runtime","optional":false},{"id":13854490693,"package_name":"github.com/muesli/ansi","ecosystem":"go","requirements":"v0.0.0-20211031195517-c9f0611b6c70","direct":true,"kind":"runtime","optional":false},{"id":13854490694,"package_name":"github.com/muesli/cancelreader","ecosystem":"go","requirements":"v0.2.2","direct":true,"kind":"runtime","optional":false},{"id":13854490695,"package_name":"github.com/muesli/reflow","ecosystem":"go","requirements":"v0.3.0","direct":true,"kind":"runtime","optional":false},{"id":13854490696,"package_name":"github.com/muesli/termenv","ecosystem":"go","requirements":"v0.15.2","direct":true,"kind":"runtime","optional":false},{"id":13854490697,"package_name":"github.com/nwaples/rardecode","ecosystem":"go","requirements":"v1.1.0","direct":true,"kind":"runtime","optional":false},{"id":13854490698,"package_name":"github.com/opencontainers/image-spec","ecosystem":"go","requirements":"v1.1.0-rc3","direct":true,"kind":"runtime","optional":false},{"id":13854490699,"package_name":"github.com/opencontainers/runc","ecosystem":"go","requirements":"v1.1.5","direct":true,"kind":"runtime","optional":false},{"id":13854490700,"package_name":"github.com/opencontainers/runtime-spec","ecosystem":"go","requirements":"v1.1.0-rc.1","direct":true,"kind":"runtime","optional":false},{"id":13854490701,"package_name":"github.com/opencontainers/selinux","ecosystem":"go","requirements":"v1.11.0","direct":true,"kind":"runtime","optional":false},{"id":13854490702,"package_name":"github.com/pborman/indent","ecosystem":"go","requirements":"v1.2.1","direct":true,"kind":"runtime","optional":false},{"id":13854490705,"package_name":"github.com/pelletier/go-toml/v2","ecosystem":"go","requirements":"v2.0.8","direct":true,"kind":"runtime","optional":false},{"id":13854490706,"package_name":"github.com/pierrec/lz4/v4","ecosystem":"go","requirements":"v4.1.15","direct":true,"kind":"runtime","optional":false},{"id":13854490707,"package_name":"github.com/pjbgf/sha1cd","ecosystem":"go","requirements":"v0.3.0","direct":true,"kind":"runtime","optional":false},{"id":13854490708,"package_name":"github.com/pkg/errors","ecosystem":"go","requirements":"v0.9.1","direct":true,"kind":"runtime","optional":false},{"id":13854490709,"package_name":"github.com/pkg/profile","ecosystem":"go","requirements":"v1.7.0","direct":true,"kind":"runtime","optional":false},{"id":13854490710,"package_name":"github.com/pmezard/go-difflib","ecosystem":"go","requirements":"v1.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854490711,"package_name":"github.com/remyoudompheng/bigfft","ecosystem":"go","requirements":"v0.0.0-20230129092748-24d4a6f8daec","direct":true,"kind":"runtime","optional":false},{"id":13854490712,"package_name":"github.com/rivo/uniseg","ecosystem":"go","requirements":"v0.2.0","direct":true,"kind":"runtime","optional":false},{"id":13854490713,"package_name":"github.com/rogpeppe/go-internal","ecosystem":"go","requirements":"v1.11.0","direct":true,"kind":"runtime","optional":false},{"id":13854490714,"package_name":"github.com/shopspring/decimal","ecosystem":"go","requirements":"v1.2.0","direct":true,"kind":"runtime","optional":false},{"id":13854490715,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.9.3","direct":true,"kind":"runtime","optional":false},{"id":13854490716,"package_name":"github.com/skeema/knownhosts","ecosystem":"go","requirements":"v1.2.0","direct":true,"kind":"runtime","optional":false},{"id":13854490717,"package_name":"github.com/spf13/cast","ecosystem":"go","requirements":"v1.5.1","direct":true,"kind":"runtime","optional":false},{"id":13854490718,"package_name":"github.com/spf13/jwalterweatherman","ecosystem":"go","requirements":"v1.1.0","direct":true,"kind":"runtime","optional":false},{"id":13854490719,"package_name":"github.com/spf13/pflag","ecosystem":"go","requirements":"v1.0.5","direct":true,"kind":"runtime","optional":false},{"id":13854490720,"package_name":"github.com/spf13/viper","ecosystem":"go","requirements":"v1.16.0","direct":true,"kind":"runtime","optional":false},{"id":13854490721,"package_name":"github.com/subosito/gotenv","ecosystem":"go","requirements":"v1.4.2","direct":true,"kind":"runtime","optional":false},{"id":13854490722,"package_name":"github.com/sylabs/sif/v2","ecosystem":"go","requirements":"v2.11.5","direct":true,"kind":"runtime","optional":false},{"id":13854490723,"package_name":"github.com/sylabs/squashfs","ecosystem":"go","requirements":"v0.6.1","direct":true,"kind":"runtime","optional":false},{"id":13854490724,"package_name":"github.com/therootcompany/xz","ecosystem":"go","requirements":"v1.0.1","direct":true,"kind":"runtime","optional":false},{"id":13854490725,"package_name":"github.com/tidwall/gjson","ecosystem":"go","requirements":"v1.16.0","direct":true,"kind":"runtime","optional":false},{"id":13854490726,"package_name":"github.com/tidwall/match","ecosystem":"go","requirements":"v1.1.1","direct":true,"kind":"runtime","optional":false},{"id":13854490727,"package_name":"github.com/tidwall/pretty","ecosystem":"go","requirements":"v1.2.1","direct":true,"kind":"runtime","optional":false},{"id":13854490728,"package_name":"github.com/tidwall/sjson","ecosystem":"go","requirements":"v1.2.5","direct":true,"kind":"runtime","optional":false},{"id":13854490729,"package_name":"github.com/ulikunitz/xz","ecosystem":"go","requirements":"v0.5.10","direct":true,"kind":"runtime","optional":false},{"id":13854490730,"package_name":"github.com/vbatts/tar-split","ecosystem":"go","requirements":"v0.11.3","direct":true,"kind":"runtime","optional":false},{"id":13854490731,"package_name":"github.com/xanzy/ssh-agent","ecosystem":"go","requirements":"v0.3.3","direct":true,"kind":"runtime","optional":false},{"id":13854490732,"package_name":"github.com/xeipuuv/gojsonpointer","ecosystem":"go","requirements":"v0.0.0-20190905194746-02993c407bfb","direct":true,"kind":"runtime","optional":false},{"id":13854490733,"package_name":"github.com/xeipuuv/gojsonreference","ecosystem":"go","requirements":"v0.0.0-20180127040603-bd5ef7bd5415","direct":true,"kind":"runtime","optional":false},{"id":13854490734,"package_name":"github.com/xi2/xz","ecosystem":"go","requirements":"v0.0.0-20171230120015-48954b6210f8","direct":true,"kind":"runtime","optional":false},{"id":13854490735,"package_name":"github.com/xo/terminfo","ecosystem":"go","requirements":"v0.0.0-20210125001918-ca9a967f8778","direct":true,"kind":"runtime","optional":false},{"id":13854490736,"package_name":"go.mozilla.org/pkcs7","ecosystem":"go","requirements":"v0.0.0-20210826202110-33d05740a352","direct":true,"kind":"runtime","optional":false},{"id":13854490737,"package_name":"go.opencensus.io","ecosystem":"go","requirements":"v0.24.0","direct":true,"kind":"runtime","optional":false},{"id":13854490738,"package_name":"go.opentelemetry.io/otel","ecosystem":"go","requirements":"v1.14.0","direct":true,"kind":"runtime","optional":false},{"id":13854490739,"package_name":"go.opentelemetry.io/otel/trace","ecosystem":"go","requirements":"v1.14.0","direct":true,"kind":"runtime","optional":false},{"id":13854490740,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.13.0","direct":true,"kind":"runtime","optional":false},{"id":13854490741,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.3.0","direct":true,"kind":"runtime","optional":false},{"id":13854490742,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.12.0","direct":true,"kind":"runtime","optional":false},{"id":13854490743,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.13.0","direct":true,"kind":"runtime","optional":false},{"id":13854490744,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.13.0","direct":true,"kind":"runtime","optional":false},{"id":13854490745,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20220907171357-04be3eba64a2","direct":true,"kind":"runtime","optional":false},{"id":13854490746,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20230410155749-daa745c078e1","direct":true,"kind":"runtime","optional":false},{"id":13854490747,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.55.0","direct":true,"kind":"runtime","optional":false},{"id":13854490748,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.30.0","direct":true,"kind":"runtime","optional":false},{"id":13854490749,"package_name":"gopkg.in/ini.v1","ecosystem":"go","requirements":"v1.67.0","direct":true,"kind":"runtime","optional":false},{"id":13854490750,"package_name":"gopkg.in/warnings.v0","ecosystem":"go","requirements":"v0.1.2","direct":true,"kind":"runtime","optional":false},{"id":13854490751,"package_name":"lukechampine.com/uint128","ecosystem":"go","requirements":"v1.2.0","direct":true,"kind":"runtime","optional":false},{"id":13854490752,"package_name":"modernc.org/cc/v3","ecosystem":"go","requirements":"v3.40.0","direct":true,"kind":"runtime","optional":false},{"id":13854490753,"package_name":"modernc.org/ccgo/v3","ecosystem":"go","requirements":"v3.16.13","direct":true,"kind":"runtime","optional":false},{"id":13854490754,"package_name":"modernc.org/libc","ecosystem":"go","requirements":"v1.24.1","direct":true,"kind":"runtime","optional":false},{"id":13854490755,"package_name":"modernc.org/mathutil","ecosystem":"go","requirements":"v1.5.0","direct":true,"kind":"runtime","optional":false},{"id":13854490756,"package_name":"modernc.org/memory","ecosystem":"go","requirements":"v1.6.0","direct":true,"kind":"runtime","optional":false},{"id":13854490757,"package_name":"modernc.org/opt","ecosystem":"go","requirements":"v0.1.3","direct":true,"kind":"runtime","optional":false},{"id":13854490758,"package_name":"modernc.org/strutil","ecosystem":"go","requirements":"v1.1.3","direct":true,"kind":"runtime","optional":false},{"id":13854490759,"package_name":"modernc.org/token","ecosystem":"go","requirements":"v1.0.1","direct":true,"kind":"runtime","optional":false},{"id":13854490760,"package_name":"retract","ecosystem":"go","requirements":"(","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"go.sum","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:10:37.482Z","updated_at":"2023-09-21T17:10:37.482Z","repository_link":"https://github.com/anchore/syft/blob/main/go.sum","dependencies":[{"id":13854490764,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.26.0","direct":false,"kind":"runtime","optional":false},{"id":13854490765,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.34.0","direct":false,"kind":"runtime","optional":false},{"id":13854490766,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.38.0","direct":false,"kind":"runtime","optional":false},{"id":13854490767,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.44.1","direct":false,"kind":"runtime","optional":false},{"id":13854490768,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.44.2","direct":false,"kind":"runtime","optional":false},{"id":13854490769,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.44.3","direct":false,"kind":"runtime","optional":false},{"id":13854490770,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.45.1","direct":false,"kind":"runtime","optional":false},{"id":13854490771,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.46.3","direct":false,"kind":"runtime","optional":false},{"id":13854490772,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.50.0","direct":false,"kind":"runtime","optional":false},{"id":13854490773,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.52.0","direct":false,"kind":"runtime","optional":false},{"id":13854490774,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.53.0","direct":false,"kind":"runtime","optional":false},{"id":13854490775,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.54.0","direct":false,"kind":"runtime","optional":false},{"id":13854490776,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.56.0","direct":false,"kind":"runtime","optional":false},{"id":13854490777,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.57.0","direct":false,"kind":"runtime","optional":false},{"id":13854490778,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.62.0","direct":false,"kind":"runtime","optional":false},{"id":13854490779,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.65.0","direct":false,"kind":"runtime","optional":false},{"id":13854490780,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.72.0","direct":false,"kind":"runtime","optional":false},{"id":13854490781,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.74.0","direct":false,"kind":"runtime","optional":false},{"id":13854490782,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.75.0","direct":false,"kind":"runtime","optional":false},{"id":13854490783,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.78.0","direct":false,"kind":"runtime","optional":false},{"id":13854490784,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.79.0","direct":false,"kind":"runtime","optional":false},{"id":13854490785,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.81.0","direct":false,"kind":"runtime","optional":false},{"id":13854490786,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.83.0","direct":false,"kind":"runtime","optional":false},{"id":13854490787,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.84.0","direct":false,"kind":"runtime","optional":false},{"id":13854490788,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.87.0","direct":false,"kind":"runtime","optional":false},{"id":13854490789,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.90.0","direct":false,"kind":"runtime","optional":false},{"id":13854490790,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.93.3","direct":false,"kind":"runtime","optional":false},{"id":13854490791,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.94.1","direct":false,"kind":"runtime","optional":false},{"id":13854490792,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.97.0","direct":false,"kind":"runtime","optional":false},{"id":13854490793,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.98.0","direct":false,"kind":"runtime","optional":false},{"id":13854490794,"package_name":"cloud.google.com/go","ecosystem":"go","requirements":"v0.99.0","direct":false,"kind":"runtime","optional":false},{"id":13854490795,"package_name":"cloud.google.com/go/bigquery","ecosystem":"go","requirements":"v1.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854490796,"package_name":"cloud.google.com/go/bigquery","ecosystem":"go","requirements":"v1.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854490797,"package_name":"cloud.google.com/go/bigquery","ecosystem":"go","requirements":"v1.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854490798,"package_name":"cloud.google.com/go/bigquery","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854490799,"package_name":"cloud.google.com/go/bigquery","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854490800,"package_name":"cloud.google.com/go/bigquery","ecosystem":"go","requirements":"v1.8.0","direct":false,"kind":"runtime","optional":false},{"id":13854490801,"package_name":"cloud.google.com/go/datastore","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854490802,"package_name":"cloud.google.com/go/datastore","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854490803,"package_name":"cloud.google.com/go/firestore","ecosystem":"go","requirements":"v1.6.1","direct":false,"kind":"runtime","optional":false},{"id":13854490804,"package_name":"cloud.google.com/go/pubsub","ecosystem":"go","requirements":"v1.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854490805,"package_name":"cloud.google.com/go/pubsub","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854490806,"package_name":"cloud.google.com/go/pubsub","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854490807,"package_name":"cloud.google.com/go/pubsub","ecosystem":"go","requirements":"v1.3.1","direct":false,"kind":"runtime","optional":false},{"id":13854490808,"package_name":"cloud.google.com/go/storage","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854490809,"package_name":"cloud.google.com/go/storage","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854490810,"package_name":"cloud.google.com/go/storage","ecosystem":"go","requirements":"v1.6.0","direct":false,"kind":"runtime","optional":false},{"id":13854490811,"package_name":"cloud.google.com/go/storage","ecosystem":"go","requirements":"v1.8.0","direct":false,"kind":"runtime","optional":false},{"id":13854490812,"package_name":"cloud.google.com/go/storage","ecosystem":"go","requirements":"v1.10.0","direct":false,"kind":"runtime","optional":false},{"id":13854490813,"package_name":"cloud.google.com/go/storage","ecosystem":"go","requirements":"v1.14.0","direct":false,"kind":"runtime","optional":false},{"id":13854490814,"package_name":"dario.cat/mergo","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854490815,"package_name":"dmitri.shuralyov.com/gpu/mtl","ecosystem":"go","requirements":"v0.0.0-20190408044501-666a987793e9","direct":false,"kind":"runtime","optional":false},{"id":13854490816,"package_name":"github.com/AdaLogics/go-fuzz-headers","ecosystem":"go","requirements":"v0.0.0-20230106234847-43070de90fa1","direct":false,"kind":"runtime","optional":false},{"id":13854490817,"package_name":"github.com/AdamKorcz/go-118-fuzz-build","ecosystem":"go","requirements":"v0.0.0-20221215162035-5330a85ea652","direct":false,"kind":"runtime","optional":false},{"id":13854490818,"package_name":"github.com/Azure/go-ansiterm","ecosystem":"go","requirements":"v0.0.0-20210617225240-d185dfc1b5a1","direct":false,"kind":"runtime","optional":false},{"id":13854490819,"package_name":"github.com/BurntSushi/toml","ecosystem":"go","requirements":"v0.3.1","direct":false,"kind":"runtime","optional":false},{"id":13854490820,"package_name":"github.com/BurntSushi/toml","ecosystem":"go","requirements":"v0.4.1","direct":false,"kind":"runtime","optional":false},{"id":13854490821,"package_name":"github.com/BurntSushi/toml","ecosystem":"go","requirements":"v1.2.1","direct":false,"kind":"runtime","optional":false},{"id":13854490822,"package_name":"github.com/BurntSushi/xgb","ecosystem":"go","requirements":"v0.0.0-20160522181843-27f122750802","direct":false,"kind":"runtime","optional":false},{"id":13854490823,"package_name":"github.com/CycloneDX/cyclonedx-go","ecosystem":"go","requirements":"v0.7.2","direct":false,"kind":"runtime","optional":false},{"id":13854490824,"package_name":"github.com/DataDog/datadog-go","ecosystem":"go","requirements":"v3.2.0+incompatible","direct":false,"kind":"runtime","optional":false},{"id":13854490825,"package_name":"github.com/DataDog/zstd","ecosystem":"go","requirements":"v1.4.5","direct":false,"kind":"runtime","optional":false},{"id":13854490826,"package_name":"github.com/Masterminds/goutils","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854490827,"package_name":"github.com/Masterminds/semver","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854490828,"package_name":"github.com/Masterminds/semver/v3","ecosystem":"go","requirements":"v3.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854490829,"package_name":"github.com/Masterminds/sprig/v3","ecosystem":"go","requirements":"v3.2.3","direct":false,"kind":"runtime","optional":false},{"id":13854490830,"package_name":"github.com/Microsoft/go-winio","ecosystem":"go","requirements":"v0.5.2","direct":false,"kind":"runtime","optional":false},{"id":13854490831,"package_name":"github.com/Microsoft/go-winio","ecosystem":"go","requirements":"v0.6.1","direct":false,"kind":"runtime","optional":false},{"id":13854490832,"package_name":"github.com/Microsoft/hcsshim","ecosystem":"go","requirements":"v0.10.0-rc.7","direct":false,"kind":"runtime","optional":false},{"id":13854490833,"package_name":"github.com/OneOfOne/xxhash","ecosystem":"go","requirements":"v1.2.2","direct":false,"kind":"runtime","optional":false},{"id":13854490834,"package_name":"github.com/ProtonMail/go-crypto","ecosystem":"go","requirements":"v0.0.0-20230828082145-3c4c8a2d2371","direct":false,"kind":"runtime","optional":false},{"id":13854490835,"package_name":"github.com/acarl005/stripansi","ecosystem":"go","requirements":"v0.0.0-20180116102854-5a71ef0e047d","direct":false,"kind":"runtime","optional":false},{"id":13854490836,"package_name":"github.com/acobaugh/osrelease","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854490837,"package_name":"github.com/acomagu/bufpipe","ecosystem":"go","requirements":"v1.0.4","direct":false,"kind":"runtime","optional":false},{"id":13854490838,"package_name":"github.com/adrg/xdg","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854490839,"package_name":"github.com/alecthomas/template","ecosystem":"go","requirements":"v0.0.0-20160405071501-a0175ee3bccc","direct":false,"kind":"runtime","optional":false},{"id":13854490840,"package_name":"github.com/alecthomas/template","ecosystem":"go","requirements":"v0.0.0-20190718012654-fb15b899a751","direct":false,"kind":"runtime","optional":false},{"id":13854490841,"package_name":"github.com/alecthomas/units","ecosystem":"go","requirements":"v0.0.0-20151022065526-2efee857e7cf","direct":false,"kind":"runtime","optional":false},{"id":13854490842,"package_name":"github.com/alecthomas/units","ecosystem":"go","requirements":"v0.0.0-20190717042225-c3de453c63f4","direct":false,"kind":"runtime","optional":false},{"id":13854490843,"package_name":"github.com/anchore/bubbly","ecosystem":"go","requirements":"v0.0.0-20230801194016-acdb4981b461","direct":false,"kind":"runtime","optional":false},{"id":13854490844,"package_name":"github.com/anchore/clio","ecosystem":"go","requirements":"v0.0.0-20230823172630-c42d666061af","direct":false,"kind":"runtime","optional":false},{"id":13854490845,"package_name":"github.com/anchore/fangs","ecosystem":"go","requirements":"v0.0.0-20230818131516-2186b10924fe","direct":false,"kind":"runtime","optional":false},{"id":13854490846,"package_name":"github.com/anchore/go-logger","ecosystem":"go","requirements":"v0.0.0-20230725134548-c21dafa1ec5a","direct":false,"kind":"runtime","optional":false},{"id":13854490847,"package_name":"github.com/anchore/go-macholibre","ecosystem":"go","requirements":"v0.0.0-20220308212642-53e6d0aaf6fb","direct":false,"kind":"runtime","optional":false},{"id":13854490848,"package_name":"github.com/anchore/go-struct-converter","ecosystem":"go","requirements":"v0.0.0-20221118182256-c68fdcfa2092","direct":false,"kind":"runtime","optional":false},{"id":13854490849,"package_name":"github.com/anchore/go-testutils","ecosystem":"go","requirements":"v0.0.0-20200925183923-d5f45b0d3c04","direct":false,"kind":"runtime","optional":false},{"id":13854490850,"package_name":"github.com/anchore/go-version","ecosystem":"go","requirements":"v1.2.2-0.20200701162849-18adb9c92b9b","direct":false,"kind":"runtime","optional":false},{"id":13854490851,"package_name":"github.com/anchore/packageurl-go","ecosystem":"go","requirements":"v0.1.1-0.20230104203445-02e0a6721501","direct":false,"kind":"runtime","optional":false},{"id":13854490852,"package_name":"github.com/anchore/stereoscope","ecosystem":"go","requirements":"v0.0.0-20230919183137-5841b53a0375","direct":false,"kind":"runtime","optional":false},{"id":13854490853,"package_name":"github.com/andreyvit/diff","ecosystem":"go","requirements":"v0.0.0-20170406064948-c7f18ee00883","direct":false,"kind":"runtime","optional":false},{"id":13854490854,"package_name":"github.com/andybalholm/brotli","ecosystem":"go","requirements":"v1.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854490855,"package_name":"github.com/andybalholm/brotli","ecosystem":"go","requirements":"v1.0.4","direct":false,"kind":"runtime","optional":false},{"id":13854490856,"package_name":"github.com/anmitsu/go-shlex","ecosystem":"go","requirements":"v0.0.0-20200514113438-38f4b401e2be","direct":false,"kind":"runtime","optional":false},{"id":13854490857,"package_name":"github.com/antihax/optional","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854490858,"package_name":"github.com/aquasecurity/go-pep440-version","ecosystem":"go","requirements":"v0.0.0-20210121094942-22b2f8951d46","direct":false,"kind":"runtime","optional":false},{"id":13854490859,"package_name":"github.com/aquasecurity/go-version","ecosystem":"go","requirements":"v0.0.0-20210121072130-637058cfe492","direct":false,"kind":"runtime","optional":false},{"id":13854490860,"package_name":"github.com/armon/circbuf","ecosystem":"go","requirements":"v0.0.0-20150827004946-bbbad097214e","direct":false,"kind":"runtime","optional":false},{"id":13854490861,"package_name":"github.com/armon/go-metrics","ecosystem":"go","requirements":"v0.0.0-20180917152333-f0300d1749da","direct":false,"kind":"runtime","optional":false},{"id":13854490862,"package_name":"github.com/armon/go-metrics","ecosystem":"go","requirements":"v0.3.10","direct":false,"kind":"runtime","optional":false},{"id":13854490863,"package_name":"github.com/armon/go-radix","ecosystem":"go","requirements":"v0.0.0-20180808171621-7fddfc383310","direct":false,"kind":"runtime","optional":false},{"id":13854490864,"package_name":"github.com/armon/go-radix","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854490865,"package_name":"github.com/armon/go-socks5","ecosystem":"go","requirements":"v0.0.0-20160902184237-e75332964ef5","direct":false,"kind":"runtime","optional":false},{"id":13854490866,"package_name":"github.com/aymanbagabas/go-osc52/v2","ecosystem":"go","requirements":"v2.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854490867,"package_name":"github.com/becheran/wildmatch-go","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854490868,"package_name":"github.com/beorn7/perks","ecosystem":"go","requirements":"v0.0.0-20180321164747-3a771d992973","direct":false,"kind":"runtime","optional":false},{"id":13854490869,"package_name":"github.com/beorn7/perks","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854490870,"package_name":"github.com/beorn7/perks","ecosystem":"go","requirements":"v1.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854490871,"package_name":"github.com/bgentry/speakeasy","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854490872,"package_name":"github.com/bmatcuk/doublestar/v4","ecosystem":"go","requirements":"v4.6.0","direct":false,"kind":"runtime","optional":false},{"id":13854490873,"package_name":"github.com/bradleyjkemp/cupaloy/v2","ecosystem":"go","requirements":"v2.8.0","direct":false,"kind":"runtime","optional":false},{"id":13854490874,"package_name":"github.com/bwesterb/go-ristretto","ecosystem":"go","requirements":"v1.2.3","direct":false,"kind":"runtime","optional":false},{"id":13854490875,"package_name":"github.com/census-instrumentation/opencensus-proto","ecosystem":"go","requirements":"v0.2.1","direct":false,"kind":"runtime","optional":false},{"id":13854490876,"package_name":"github.com/census-instrumentation/opencensus-proto","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854490877,"package_name":"github.com/cespare/xxhash","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854490878,"package_name":"github.com/cespare/xxhash/v2","ecosystem":"go","requirements":"v2.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854490879,"package_name":"github.com/cespare/xxhash/v2","ecosystem":"go","requirements":"v2.1.2","direct":false,"kind":"runtime","optional":false},{"id":13854490880,"package_name":"github.com/charmbracelet/bubbles","ecosystem":"go","requirements":"v0.16.1","direct":false,"kind":"runtime","optional":false},{"id":13854490881,"package_name":"github.com/charmbracelet/bubbletea","ecosystem":"go","requirements":"v0.24.2","direct":false,"kind":"runtime","optional":false},{"id":13854490882,"package_name":"github.com/charmbracelet/harmonica","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854490883,"package_name":"github.com/charmbracelet/lipgloss","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":13854490884,"package_name":"github.com/checkpoint-restore/go-criu/v5","ecosystem":"go","requirements":"v5.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854490885,"package_name":"github.com/chzyer/logex","ecosystem":"go","requirements":"v1.1.10","direct":false,"kind":"runtime","optional":false},{"id":13854490886,"package_name":"github.com/chzyer/readline","ecosystem":"go","requirements":"v0.0.0-20180603132655-2972be24d48e","direct":false,"kind":"runtime","optional":false},{"id":13854490887,"package_name":"github.com/chzyer/test","ecosystem":"go","requirements":"v0.0.0-20180213035817-a1ea475d72b1","direct":false,"kind":"runtime","optional":false},{"id":13854490888,"package_name":"github.com/cilium/ebpf","ecosystem":"go","requirements":"v0.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854490889,"package_name":"github.com/circonus-labs/circonus-gometrics","ecosystem":"go","requirements":"v2.3.1+incompatible","direct":false,"kind":"runtime","optional":false},{"id":13854490890,"package_name":"github.com/circonus-labs/circonusllhist","ecosystem":"go","requirements":"v0.1.3","direct":false,"kind":"runtime","optional":false},{"id":13854490891,"package_name":"github.com/client9/misspell","ecosystem":"go","requirements":"v0.3.4","direct":false,"kind":"runtime","optional":false},{"id":13854490892,"package_name":"github.com/cloudflare/circl","ecosystem":"go","requirements":"v1.3.3","direct":false,"kind":"runtime","optional":false},{"id":13854490893,"package_name":"github.com/cncf/udpa/go","ecosystem":"go","requirements":"v0.0.0-20191209042840-269d4d468f6f","direct":false,"kind":"runtime","optional":false},{"id":13854490894,"package_name":"github.com/cncf/udpa/go","ecosystem":"go","requirements":"v0.0.0-20200629203442-efcf912fb354","direct":false,"kind":"runtime","optional":false},{"id":13854490895,"package_name":"github.com/cncf/udpa/go","ecosystem":"go","requirements":"v0.0.0-20201120205902-5459f2c99403","direct":false,"kind":"runtime","optional":false},{"id":13854490896,"package_name":"github.com/cncf/udpa/go","ecosystem":"go","requirements":"v0.0.0-20210930031921-04548b0d99d4","direct":false,"kind":"runtime","optional":false},{"id":13854490897,"package_name":"github.com/cncf/xds/go","ecosystem":"go","requirements":"v0.0.0-20210312221358-fbca930ec8ed","direct":false,"kind":"runtime","optional":false},{"id":13854490898,"package_name":"github.com/cncf/xds/go","ecosystem":"go","requirements":"v0.0.0-20210805033703-aa0b78936158","direct":false,"kind":"runtime","optional":false},{"id":13854490899,"package_name":"github.com/cncf/xds/go","ecosystem":"go","requirements":"v0.0.0-20210922020428-25de7278fc84","direct":false,"kind":"runtime","optional":false},{"id":13854490900,"package_name":"github.com/cncf/xds/go","ecosystem":"go","requirements":"v0.0.0-20211001041855-01bcc9b48dfe","direct":false,"kind":"runtime","optional":false},{"id":13854490901,"package_name":"github.com/cncf/xds/go","ecosystem":"go","requirements":"v0.0.0-20211011173535-cb28da3451f1","direct":false,"kind":"runtime","optional":false},{"id":13854490902,"package_name":"github.com/cncf/xds/go","ecosystem":"go","requirements":"v0.0.0-20211130200136-a8f946100490","direct":false,"kind":"runtime","optional":false},{"id":13854490903,"package_name":"github.com/containerd/cgroups","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854490904,"package_name":"github.com/containerd/console","ecosystem":"go","requirements":"v1.0.3","direct":false,"kind":"runtime","optional":false},{"id":13854490905,"package_name":"github.com/containerd/console","ecosystem":"go","requirements":"v1.0.4-0.20230313162750-1ae8d489ac81","direct":false,"kind":"runtime","optional":false},{"id":13854490906,"package_name":"github.com/containerd/containerd","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854490907,"package_name":"github.com/containerd/continuity","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854490908,"package_name":"github.com/containerd/fifo","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854490909,"package_name":"github.com/containerd/stargz-snapshotter/estargz","ecosystem":"go","requirements":"v0.14.3","direct":false,"kind":"runtime","optional":false},{"id":13854490910,"package_name":"github.com/containerd/ttrpc","ecosystem":"go","requirements":"v1.2.1","direct":false,"kind":"runtime","optional":false},{"id":13854490911,"package_name":"github.com/containerd/typeurl/v2","ecosystem":"go","requirements":"v2.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854490912,"package_name":"github.com/coreos/go-semver","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854490913,"package_name":"github.com/coreos/go-systemd/v22","ecosystem":"go","requirements":"v22.3.2","direct":false,"kind":"runtime","optional":false},{"id":13854490914,"package_name":"github.com/cpuguy83/go-md2man/v2","ecosystem":"go","requirements":"v2.0.0-20190314233015-f79a8a8ca69d","direct":false,"kind":"runtime","optional":false},{"id":13854490915,"package_name":"github.com/cpuguy83/go-md2man/v2","ecosystem":"go","requirements":"v2.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854490916,"package_name":"github.com/cpuguy83/go-md2man/v2","ecosystem":"go","requirements":"v2.0.2","direct":false,"kind":"runtime","optional":false},{"id":13854490917,"package_name":"github.com/creack/pty","ecosystem":"go","requirements":"v1.1.9","direct":false,"kind":"runtime","optional":false},{"id":13854490918,"package_name":"github.com/cyphar/filepath-securejoin","ecosystem":"go","requirements":"v0.2.3","direct":false,"kind":"runtime","optional":false},{"id":13854490919,"package_name":"github.com/cyphar/filepath-securejoin","ecosystem":"go","requirements":"v0.2.4","direct":false,"kind":"runtime","optional":false},{"id":13854490920,"package_name":"github.com/dave/jennifer","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854490921,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v0.0.0-20161028175848-04cdfd42973b","direct":false,"kind":"runtime","optional":false},{"id":13854490922,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854490923,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854490924,"package_name":"github.com/deitch/magic","ecosystem":"go","requirements":"v0.0.0-20230404182410-1ff89d7342da","direct":false,"kind":"runtime","optional":false},{"id":13854490925,"package_name":"github.com/dgrijalva/jwt-go/v4","ecosystem":"go","requirements":"v4.0.0-preview1","direct":false,"kind":"runtime","optional":false},{"id":13854490926,"package_name":"github.com/docker/cli","ecosystem":"go","requirements":"v24.0.0+incompatible","direct":false,"kind":"runtime","optional":false},{"id":13854490927,"package_name":"github.com/docker/distribution","ecosystem":"go","requirements":"v2.8.2+incompatible","direct":false,"kind":"runtime","optional":false},{"id":13854490928,"package_name":"github.com/docker/docker","ecosystem":"go","requirements":"v24.0.6+incompatible","direct":false,"kind":"runtime","optional":false},{"id":13854490929,"package_name":"github.com/docker/docker-credential-helpers","ecosystem":"go","requirements":"v0.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854490930,"package_name":"github.com/docker/go-connections","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854490931,"package_name":"github.com/docker/go-events","ecosystem":"go","requirements":"v0.0.0-20190806004212-e31b211e4f1c","direct":false,"kind":"runtime","optional":false},{"id":13854490932,"package_name":"github.com/docker/go-units","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854490933,"package_name":"github.com/docker/go-units","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854490934,"package_name":"github.com/dsnet/compress","ecosystem":"go","requirements":"v0.0.2-0.20210315054119-f66993602bf5","direct":false,"kind":"runtime","optional":false},{"id":13854490935,"package_name":"github.com/dsnet/golib","ecosystem":"go","requirements":"v0.0.0-20171103203638-1ea166775780","direct":false,"kind":"runtime","optional":false},{"id":13854490956,"package_name":"github.com/dustin/go-humanize","ecosystem":"go","requirements":"v1.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854490957,"package_name":"github.com/edsrzf/mmap-go","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854490958,"package_name":"github.com/elazarl/goproxy","ecosystem":"go","requirements":"v0.0.0-20230808193330-2592e75ae04a","direct":false,"kind":"runtime","optional":false},{"id":13854490959,"package_name":"github.com/emirpasic/gods","ecosystem":"go","requirements":"v1.18.1","direct":false,"kind":"runtime","optional":false},{"id":13854490960,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.0","direct":false,"kind":"runtime","optional":false},{"id":13854490961,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.1-0.20191026205805-5f8ba28d4473","direct":false,"kind":"runtime","optional":false},{"id":13854490962,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.4","direct":false,"kind":"runtime","optional":false},{"id":13854490963,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.7","direct":false,"kind":"runtime","optional":false},{"id":13854490964,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.9-0.20201210154907-fd9021fe5dad","direct":false,"kind":"runtime","optional":false},{"id":13854490965,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.9-0.20210217033140-668b12f5399d","direct":false,"kind":"runtime","optional":false},{"id":13854490966,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.9-0.20210512163311-63b5d3c536b0","direct":false,"kind":"runtime","optional":false},{"id":13854490967,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.9.10-0.20210907150352-cf90f659a021","direct":false,"kind":"runtime","optional":false},{"id":13854490968,"package_name":"github.com/envoyproxy/go-control-plane","ecosystem":"go","requirements":"v0.10.1","direct":false,"kind":"runtime","optional":false},{"id":13854490969,"package_name":"github.com/envoyproxy/protoc-gen-validate","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854490970,"package_name":"github.com/envoyproxy/protoc-gen-validate","ecosystem":"go","requirements":"v0.6.2","direct":false,"kind":"runtime","optional":false},{"id":13854490971,"package_name":"github.com/facebookincubator/flog","ecosystem":"go","requirements":"v0.0.0-20190930132826-d2511d0ce33c","direct":false,"kind":"runtime","optional":false},{"id":13854490972,"package_name":"github.com/facebookincubator/nvdtools","ecosystem":"go","requirements":"v0.1.5","direct":false,"kind":"runtime","optional":false},{"id":13854490973,"package_name":"github.com/fatih/color","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854490974,"package_name":"github.com/fatih/color","ecosystem":"go","requirements":"v1.9.0","direct":false,"kind":"runtime","optional":false},{"id":13854490975,"package_name":"github.com/fatih/color","ecosystem":"go","requirements":"v1.13.0","direct":false,"kind":"runtime","optional":false},{"id":13854490976,"package_name":"github.com/fatih/set","ecosystem":"go","requirements":"v0.2.1","direct":false,"kind":"runtime","optional":false},{"id":13854490977,"package_name":"github.com/felixge/fgprof","ecosystem":"go","requirements":"v0.9.3","direct":false,"kind":"runtime","optional":false},{"id":13854490978,"package_name":"github.com/frankban/quicktest","ecosystem":"go","requirements":"v1.11.3","direct":false,"kind":"runtime","optional":false},{"id":13854490979,"package_name":"github.com/frankban/quicktest","ecosystem":"go","requirements":"v1.14.4","direct":false,"kind":"runtime","optional":false},{"id":13854490980,"package_name":"github.com/fsnotify/fsnotify","ecosystem":"go","requirements":"v1.5.1","direct":false,"kind":"runtime","optional":false},{"id":13854490981,"package_name":"github.com/fsnotify/fsnotify","ecosystem":"go","requirements":"v1.6.0","direct":false,"kind":"runtime","optional":false},{"id":13854490982,"package_name":"github.com/gabriel-vasile/mimetype","ecosystem":"go","requirements":"v1.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854490983,"package_name":"github.com/ghodss/yaml","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854490984,"package_name":"github.com/github/go-spdx/v2","ecosystem":"go","requirements":"v2.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854490985,"package_name":"github.com/gkampitakis/ciinfo","ecosystem":"go","requirements":"v0.2.5","direct":false,"kind":"runtime","optional":false},{"id":13854490986,"package_name":"github.com/gkampitakis/go-diff","ecosystem":"go","requirements":"v1.3.2","direct":false,"kind":"runtime","optional":false},{"id":13854490987,"package_name":"github.com/gkampitakis/go-snaps","ecosystem":"go","requirements":"v0.4.10","direct":false,"kind":"runtime","optional":false},{"id":13854490988,"package_name":"github.com/glebarez/go-sqlite","ecosystem":"go","requirements":"v1.20.3","direct":false,"kind":"runtime","optional":false},{"id":13854490989,"package_name":"github.com/gliderlabs/ssh","ecosystem":"go","requirements":"v0.3.5","direct":false,"kind":"runtime","optional":false},{"id":13854490990,"package_name":"github.com/go-git/gcfg","ecosystem":"go","requirements":"v1.5.1-0.20230307220236-3a3c6141e376","direct":false,"kind":"runtime","optional":false},{"id":13854490991,"package_name":"github.com/go-git/go-billy/v5","ecosystem":"go","requirements":"v5.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854490992,"package_name":"github.com/go-git/go-git-fixtures/v4","ecosystem":"go","requirements":"v4.3.2-0.20230305113008-0c11038e723f","direct":false,"kind":"runtime","optional":false},{"id":13854490993,"package_name":"github.com/go-git/go-git/v5","ecosystem":"go","requirements":"v5.9.0","direct":false,"kind":"runtime","optional":false},{"id":13854490994,"package_name":"github.com/go-gl/glfw","ecosystem":"go","requirements":"v0.0.0-20190409004039-e6da0acd62b1","direct":false,"kind":"runtime","optional":false},{"id":13854490995,"package_name":"github.com/go-gl/glfw/v3.3/glfw","ecosystem":"go","requirements":"v0.0.0-20191125211704-12ad95a8df72","direct":false,"kind":"runtime","optional":false},{"id":13854490996,"package_name":"github.com/go-gl/glfw/v3.3/glfw","ecosystem":"go","requirements":"v0.0.0-20200222043503-6f7a984d4dc4","direct":false,"kind":"runtime","optional":false},{"id":13854490997,"package_name":"github.com/go-kit/kit","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":13854490998,"package_name":"github.com/go-kit/kit","ecosystem":"go","requirements":"v0.9.0","direct":false,"kind":"runtime","optional":false},{"id":13854490999,"package_name":"github.com/go-logfmt/logfmt","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854491000,"package_name":"github.com/go-logfmt/logfmt","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854491001,"package_name":"github.com/go-logr/logr","ecosystem":"go","requirements":"v1.2.2","direct":false,"kind":"runtime","optional":false},{"id":13854491002,"package_name":"github.com/go-logr/logr","ecosystem":"go","requirements":"v1.2.3","direct":false,"kind":"runtime","optional":false},{"id":13854491003,"package_name":"github.com/go-logr/stdr","ecosystem":"go","requirements":"v1.2.2","direct":false,"kind":"runtime","optional":false},{"id":13854491004,"package_name":"github.com/go-restruct/restruct","ecosystem":"go","requirements":"v1.2.0-alpha","direct":false,"kind":"runtime","optional":false},{"id":13854491005,"package_name":"github.com/go-sql-driver/mysql","ecosystem":"go","requirements":"v1.6.0","direct":false,"kind":"runtime","optional":false},{"id":13854491006,"package_name":"github.com/go-stack/stack","ecosystem":"go","requirements":"v1.8.0","direct":false,"kind":"runtime","optional":false},{"id":13854491007,"package_name":"github.com/go-test/deep","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491008,"package_name":"github.com/godbus/dbus/v5","ecosystem":"go","requirements":"v5.0.4","direct":false,"kind":"runtime","optional":false},{"id":13854491009,"package_name":"github.com/godbus/dbus/v5","ecosystem":"go","requirements":"v5.0.6","direct":false,"kind":"runtime","optional":false},{"id":13854491010,"package_name":"github.com/gogo/protobuf","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854491011,"package_name":"github.com/gogo/protobuf","ecosystem":"go","requirements":"v1.3.2","direct":false,"kind":"runtime","optional":false},{"id":13854491012,"package_name":"github.com/golang/glog","ecosystem":"go","requirements":"v0.0.0-20160126235308-23def4e6c14b","direct":false,"kind":"runtime","optional":false},{"id":13854491013,"package_name":"github.com/golang/groupcache","ecosystem":"go","requirements":"v0.0.0-20190702054246-869f871628b6","direct":false,"kind":"runtime","optional":false},{"id":13854491014,"package_name":"github.com/golang/groupcache","ecosystem":"go","requirements":"v0.0.0-20191227052852-215e87163ea7","direct":false,"kind":"runtime","optional":false},{"id":13854491015,"package_name":"github.com/golang/groupcache","ecosystem":"go","requirements":"v0.0.0-20200121045136-8c9f03a8e57e","direct":false,"kind":"runtime","optional":false},{"id":13854491016,"package_name":"github.com/golang/groupcache","ecosystem":"go","requirements":"v0.0.0-20210331224755-41bb18bfe9da","direct":false,"kind":"runtime","optional":false},{"id":13854491017,"package_name":"github.com/golang/mock","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854491018,"package_name":"github.com/golang/mock","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491019,"package_name":"github.com/golang/mock","ecosystem":"go","requirements":"v1.3.1","direct":false,"kind":"runtime","optional":false},{"id":13854491020,"package_name":"github.com/golang/mock","ecosystem":"go","requirements":"v1.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854491021,"package_name":"github.com/golang/mock","ecosystem":"go","requirements":"v1.4.1","direct":false,"kind":"runtime","optional":false},{"id":13854491022,"package_name":"github.com/golang/mock","ecosystem":"go","requirements":"v1.4.3","direct":false,"kind":"runtime","optional":false},{"id":13854491023,"package_name":"github.com/golang/mock","ecosystem":"go","requirements":"v1.4.4","direct":false,"kind":"runtime","optional":false},{"id":13854491024,"package_name":"github.com/golang/mock","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854491025,"package_name":"github.com/golang/mock","ecosystem":"go","requirements":"v1.6.0","direct":false,"kind":"runtime","optional":false},{"id":13854491026,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491027,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.3.1","direct":false,"kind":"runtime","optional":false},{"id":13854491028,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.3.2","direct":false,"kind":"runtime","optional":false},{"id":13854491029,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.3.3","direct":false,"kind":"runtime","optional":false},{"id":13854491030,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.3.4","direct":false,"kind":"runtime","optional":false},{"id":13854491031,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.3.5","direct":false,"kind":"runtime","optional":false},{"id":13854491032,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0-rc.1","direct":false,"kind":"runtime","optional":false},{"id":13854491033,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0-rc.1.0.20200221234624-67d41d38c208","direct":false,"kind":"runtime","optional":false},{"id":13854491034,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0-rc.2","direct":false,"kind":"runtime","optional":false},{"id":13854491035,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0-rc.4.0.20200313231945-b860323f09d0","direct":false,"kind":"runtime","optional":false},{"id":13854491036,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854491037,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.1","direct":false,"kind":"runtime","optional":false},{"id":13854491038,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.2","direct":false,"kind":"runtime","optional":false},{"id":13854491039,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.4.3","direct":false,"kind":"runtime","optional":false},{"id":13854491040,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854491041,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.1","direct":false,"kind":"runtime","optional":false},{"id":13854491042,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.2","direct":false,"kind":"runtime","optional":false},{"id":13854491043,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.3","direct":false,"kind":"runtime","optional":false},{"id":13854491044,"package_name":"github.com/golang/snappy","ecosystem":"go","requirements":"v0.0.2","direct":false,"kind":"runtime","optional":false},{"id":13854491045,"package_name":"github.com/golang/snappy","ecosystem":"go","requirements":"v0.0.3","direct":false,"kind":"runtime","optional":false},{"id":13854491046,"package_name":"github.com/golang/snappy","ecosystem":"go","requirements":"v0.0.4","direct":false,"kind":"runtime","optional":false},{"id":13854491047,"package_name":"github.com/google/btree","ecosystem":"go","requirements":"v0.0.0-20180813153112-4030bb1f1f0c","direct":false,"kind":"runtime","optional":false},{"id":13854491048,"package_name":"github.com/google/btree","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491049,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491050,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854491051,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.3.1","direct":false,"kind":"runtime","optional":false},{"id":13854491052,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854491053,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.4.1","direct":false,"kind":"runtime","optional":false},{"id":13854491054,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854491055,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.1","direct":false,"kind":"runtime","optional":false},{"id":13854491056,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.2","direct":false,"kind":"runtime","optional":false},{"id":13854491057,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.3","direct":false,"kind":"runtime","optional":false},{"id":13854491058,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.4","direct":false,"kind":"runtime","optional":false},{"id":13854491059,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.5","direct":false,"kind":"runtime","optional":false},{"id":13854491060,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.6","direct":false,"kind":"runtime","optional":false},{"id":13854491061,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.9","direct":false,"kind":"runtime","optional":false},{"id":13854491062,"package_name":"github.com/google/go-containerregistry","ecosystem":"go","requirements":"v0.16.1","direct":false,"kind":"runtime","optional":false},{"id":13854491063,"package_name":"github.com/google/gofuzz","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491064,"package_name":"github.com/google/licensecheck","ecosystem":"go","requirements":"v0.3.1","direct":false,"kind":"runtime","optional":false},{"id":13854491065,"package_name":"github.com/google/martian","ecosystem":"go","requirements":"v2.1.0+incompatible","direct":false,"kind":"runtime","optional":false},{"id":13854491066,"package_name":"github.com/google/martian/v3","ecosystem":"go","requirements":"v3.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491067,"package_name":"github.com/google/martian/v3","ecosystem":"go","requirements":"v3.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491068,"package_name":"github.com/google/martian/v3","ecosystem":"go","requirements":"v3.2.1","direct":false,"kind":"runtime","optional":false},{"id":13854491069,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20181206194817-3ea8567a2e57","direct":false,"kind":"runtime","optional":false},{"id":13854491070,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20190515194954-54271f7e092f","direct":false,"kind":"runtime","optional":false},{"id":13854491071,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20191218002539-d4f498aebedc","direct":false,"kind":"runtime","optional":false},{"id":13854491072,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20200212024743-f11f1df84d12","direct":false,"kind":"runtime","optional":false},{"id":13854491073,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20200229191704-1ebb73c60ed3","direct":false,"kind":"runtime","optional":false},{"id":13854491074,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20200430221834-fc25d7d30c6d","direct":false,"kind":"runtime","optional":false},{"id":13854491075,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20200708004538-1a94d8640e99","direct":false,"kind":"runtime","optional":false},{"id":13854491076,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20201023163331-3e6fc7fc9c4c","direct":false,"kind":"runtime","optional":false},{"id":13854491077,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20201203190320-1bf35d6f28c2","direct":false,"kind":"runtime","optional":false},{"id":13854491078,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20201218002935-b9804c9f04c2","direct":false,"kind":"runtime","optional":false},{"id":13854491079,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20210122040257-d980be63207e","direct":false,"kind":"runtime","optional":false},{"id":13854491080,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20210226084205-cbba55b83ad5","direct":false,"kind":"runtime","optional":false},{"id":13854491081,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20210601050228-01bbb1931b22","direct":false,"kind":"runtime","optional":false},{"id":13854491082,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20210609004039-a478d1d731e9","direct":false,"kind":"runtime","optional":false},{"id":13854491083,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20210720184732-4bb14d4b1be1","direct":false,"kind":"runtime","optional":false},{"id":13854491084,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20211214055906-6f57359322fd","direct":false,"kind":"runtime","optional":false},{"id":13854491085,"package_name":"github.com/google/pprof","ecosystem":"go","requirements":"v0.0.0-20221118152302-e6195bd50e26","direct":false,"kind":"runtime","optional":false},{"id":13854491086,"package_name":"github.com/google/renameio","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491087,"package_name":"github.com/google/uuid","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854491088,"package_name":"github.com/google/uuid","ecosystem":"go","requirements":"v1.1.2","direct":false,"kind":"runtime","optional":false},{"id":13854491089,"package_name":"github.com/google/uuid","ecosystem":"go","requirements":"v1.3.1","direct":false,"kind":"runtime","optional":false},{"id":13854491090,"package_name":"github.com/googleapis/gax-go/v2","ecosystem":"go","requirements":"v2.0.4","direct":false,"kind":"runtime","optional":false},{"id":13854491091,"package_name":"github.com/googleapis/gax-go/v2","ecosystem":"go","requirements":"v2.0.5","direct":false,"kind":"runtime","optional":false},{"id":13854491092,"package_name":"github.com/googleapis/gax-go/v2","ecosystem":"go","requirements":"v2.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491093,"package_name":"github.com/googleapis/gax-go/v2","ecosystem":"go","requirements":"v2.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854491094,"package_name":"github.com/googleapis/google-cloud-go-testing","ecosystem":"go","requirements":"v0.0.0-20200911160855-bcd43fbb19e8","direct":false,"kind":"runtime","optional":false},{"id":13854491095,"package_name":"github.com/gookit/color","ecosystem":"go","requirements":"v1.2.5","direct":false,"kind":"runtime","optional":false},{"id":13854491096,"package_name":"github.com/gookit/color","ecosystem":"go","requirements":"v1.5.4","direct":false,"kind":"runtime","optional":false},{"id":13854491097,"package_name":"github.com/grpc-ecosystem/grpc-gateway","ecosystem":"go","requirements":"v1.16.0","direct":false,"kind":"runtime","optional":false},{"id":13854491098,"package_name":"github.com/hashicorp/consul/api","ecosystem":"go","requirements":"v1.11.0","direct":false,"kind":"runtime","optional":false},{"id":13854491099,"package_name":"github.com/hashicorp/consul/sdk","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":13854491100,"package_name":"github.com/hashicorp/errwrap","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491101,"package_name":"github.com/hashicorp/errwrap","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491102,"package_name":"github.com/hashicorp/go-cleanhttp","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854491103,"package_name":"github.com/hashicorp/go-cleanhttp","ecosystem":"go","requirements":"v0.5.1","direct":false,"kind":"runtime","optional":false},{"id":13854491104,"package_name":"github.com/hashicorp/go-cleanhttp","ecosystem":"go","requirements":"v0.5.2","direct":false,"kind":"runtime","optional":false},{"id":13854491105,"package_name":"github.com/hashicorp/go-hclog","ecosystem":"go","requirements":"v0.12.0","direct":false,"kind":"runtime","optional":false},{"id":13854491106,"package_name":"github.com/hashicorp/go-hclog","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491107,"package_name":"github.com/hashicorp/go-immutable-radix","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491108,"package_name":"github.com/hashicorp/go-immutable-radix","ecosystem":"go","requirements":"v1.3.1","direct":false,"kind":"runtime","optional":false},{"id":13854491109,"package_name":"github.com/hashicorp/go-msgpack","ecosystem":"go","requirements":"v0.5.3","direct":false,"kind":"runtime","optional":false},{"id":13854491110,"package_name":"github.com/hashicorp/go-multierror","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491111,"package_name":"github.com/hashicorp/go-multierror","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491112,"package_name":"github.com/hashicorp/go-multierror","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854491113,"package_name":"github.com/hashicorp/go-retryablehttp","ecosystem":"go","requirements":"v0.5.3","direct":false,"kind":"runtime","optional":false},{"id":13854491114,"package_name":"github.com/hashicorp/go-rootcerts","ecosystem":"go","requirements":"v1.0.2","direct":false,"kind":"runtime","optional":false},{"id":13854491115,"package_name":"github.com/hashicorp/go-sockaddr","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491116,"package_name":"github.com/hashicorp/go-syslog","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491117,"package_name":"github.com/hashicorp/go-uuid","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491118,"package_name":"github.com/hashicorp/go-uuid","ecosystem":"go","requirements":"v1.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854491119,"package_name":"github.com/hashicorp/golang-lru","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854491120,"package_name":"github.com/hashicorp/golang-lru","ecosystem":"go","requirements":"v0.5.1","direct":false,"kind":"runtime","optional":false},{"id":13854491121,"package_name":"github.com/hashicorp/golang-lru","ecosystem":"go","requirements":"v0.5.4","direct":false,"kind":"runtime","optional":false},{"id":13854491122,"package_name":"github.com/hashicorp/hcl","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491123,"package_name":"github.com/hashicorp/logutils","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491124,"package_name":"github.com/hashicorp/mdns","ecosystem":"go","requirements":"v1.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854491125,"package_name":"github.com/hashicorp/mdns","ecosystem":"go","requirements":"v1.0.4","direct":false,"kind":"runtime","optional":false},{"id":13854491126,"package_name":"github.com/hashicorp/memberlist","ecosystem":"go","requirements":"v0.2.2","direct":false,"kind":"runtime","optional":false},{"id":13854491127,"package_name":"github.com/hashicorp/memberlist","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854491128,"package_name":"github.com/hashicorp/serf","ecosystem":"go","requirements":"v0.9.5","direct":false,"kind":"runtime","optional":false},{"id":13854491129,"package_name":"github.com/hashicorp/serf","ecosystem":"go","requirements":"v0.9.6","direct":false,"kind":"runtime","optional":false},{"id":13854491130,"package_name":"github.com/huandu/xstrings","ecosystem":"go","requirements":"v1.3.3","direct":false,"kind":"runtime","optional":false},{"id":13854491131,"package_name":"github.com/iancoleman/orderedmap","ecosystem":"go","requirements":"v0.0.0-20190318233801-ac98e3ecb4b0","direct":false,"kind":"runtime","optional":false},{"id":13854491132,"package_name":"github.com/iancoleman/strcase","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491133,"package_name":"github.com/iancoleman/strcase","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854491134,"package_name":"github.com/ianlancetaylor/demangle","ecosystem":"go","requirements":"v0.0.0-20181102032728-5e5cf60278f6","direct":false,"kind":"runtime","optional":false},{"id":13854491135,"package_name":"github.com/ianlancetaylor/demangle","ecosystem":"go","requirements":"v0.0.0-20200824232613-28f6c0f3b639","direct":false,"kind":"runtime","optional":false},{"id":13854491136,"package_name":"github.com/ianlancetaylor/demangle","ecosystem":"go","requirements":"v0.0.0-20210905161508-09a460cdf81d","direct":false,"kind":"runtime","optional":false},{"id":13854491137,"package_name":"github.com/imdario/mergo","ecosystem":"go","requirements":"v0.3.11","direct":false,"kind":"runtime","optional":false},{"id":13854491138,"package_name":"github.com/imdario/mergo","ecosystem":"go","requirements":"v0.3.15","direct":false,"kind":"runtime","optional":false},{"id":13854491139,"package_name":"github.com/inconshreveable/mousetrap","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491140,"package_name":"github.com/inconshreveable/mousetrap","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491141,"package_name":"github.com/invopop/jsonschema","ecosystem":"go","requirements":"v0.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854491142,"package_name":"github.com/jbenet/go-context","ecosystem":"go","requirements":"v0.0.0-20150711004518-d14ea06fba99","direct":false,"kind":"runtime","optional":false},{"id":13854491143,"package_name":"github.com/jinzhu/copier","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854491144,"package_name":"github.com/json-iterator/go","ecosystem":"go","requirements":"v1.1.6","direct":false,"kind":"runtime","optional":false},{"id":13854491145,"package_name":"github.com/json-iterator/go","ecosystem":"go","requirements":"v1.1.9","direct":false,"kind":"runtime","optional":false},{"id":13854491146,"package_name":"github.com/json-iterator/go","ecosystem":"go","requirements":"v1.1.11","direct":false,"kind":"runtime","optional":false},{"id":13854491147,"package_name":"github.com/json-iterator/go","ecosystem":"go","requirements":"v1.1.12","direct":false,"kind":"runtime","optional":false},{"id":13854491148,"package_name":"github.com/jstemmer/go-junit-report","ecosystem":"go","requirements":"v0.0.0-20190106144839-af01ea7f8024","direct":false,"kind":"runtime","optional":false},{"id":13854491149,"package_name":"github.com/jstemmer/go-junit-report","ecosystem":"go","requirements":"v0.9.1","direct":false,"kind":"runtime","optional":false},{"id":13854491150,"package_name":"github.com/julienschmidt/httprouter","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491151,"package_name":"github.com/kastenhq/goversion","ecosystem":"go","requirements":"v0.0.0-20230811215019-93b2f8823953","direct":false,"kind":"runtime","optional":false},{"id":13854491152,"package_name":"github.com/kballard/go-shellquote","ecosystem":"go","requirements":"v0.0.0-20180428030007-95032a82bc51","direct":false,"kind":"runtime","optional":false},{"id":13854491153,"package_name":"github.com/kevinburke/ssh_config","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491154,"package_name":"github.com/kisielk/errcheck","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854491155,"package_name":"github.com/kisielk/gotool","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491156,"package_name":"github.com/klauspost/compress","ecosystem":"go","requirements":"v1.4.1","direct":false,"kind":"runtime","optional":false},{"id":13854491157,"package_name":"github.com/klauspost/compress","ecosystem":"go","requirements":"v1.11.4","direct":false,"kind":"runtime","optional":false},{"id":13854491158,"package_name":"github.com/klauspost/compress","ecosystem":"go","requirements":"v1.11.7","direct":false,"kind":"runtime","optional":false},{"id":13854491159,"package_name":"github.com/klauspost/compress","ecosystem":"go","requirements":"v1.16.5","direct":false,"kind":"runtime","optional":false},{"id":13854491160,"package_name":"github.com/klauspost/cpuid","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491161,"package_name":"github.com/klauspost/pgzip","ecosystem":"go","requirements":"v1.2.5","direct":false,"kind":"runtime","optional":false},{"id":13854491162,"package_name":"github.com/knqyf263/go-rpmdb","ecosystem":"go","requirements":"v0.0.0-20230301153543-ba94b245509b","direct":false,"kind":"runtime","optional":false},{"id":13854491163,"package_name":"github.com/konsorten/go-windows-terminal-sequences","ecosystem":"go","requirements":"v1.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854491164,"package_name":"github.com/kr/fs","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491165,"package_name":"github.com/kr/logfmt","ecosystem":"go","requirements":"v0.0.0-20140226030751-b84e30acd515","direct":false,"kind":"runtime","optional":false},{"id":13854491166,"package_name":"github.com/kr/pretty","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491167,"package_name":"github.com/kr/pretty","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491168,"package_name":"github.com/kr/pretty","ecosystem":"go","requirements":"v0.2.1","direct":false,"kind":"runtime","optional":false},{"id":13854491169,"package_name":"github.com/kr/pretty","ecosystem":"go","requirements":"v0.3.1","direct":false,"kind":"runtime","optional":false},{"id":13854491170,"package_name":"github.com/kr/pty","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854491171,"package_name":"github.com/kr/text","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491172,"package_name":"github.com/kr/text","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491173,"package_name":"github.com/logrusorgru/aurora","ecosystem":"go","requirements":"v0.0.0-20200102142835-e9ef32dff381","direct":false,"kind":"runtime","optional":false},{"id":13854491174,"package_name":"github.com/lucasb-eyer/go-colorful","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491175,"package_name":"github.com/lyft/protoc-gen-star","ecosystem":"go","requirements":"v0.5.3","direct":false,"kind":"runtime","optional":false},{"id":13854491176,"package_name":"github.com/magiconair/properties","ecosystem":"go","requirements":"v1.8.5","direct":false,"kind":"runtime","optional":false},{"id":13854491177,"package_name":"github.com/magiconair/properties","ecosystem":"go","requirements":"v1.8.7","direct":false,"kind":"runtime","optional":false},{"id":13854491178,"package_name":"github.com/matryer/is","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491179,"package_name":"github.com/mattn/go-colorable","ecosystem":"go","requirements":"v0.0.9","direct":false,"kind":"runtime","optional":false},{"id":13854491180,"package_name":"github.com/mattn/go-colorable","ecosystem":"go","requirements":"v0.1.4","direct":false,"kind":"runtime","optional":false},{"id":13854491181,"package_name":"github.com/mattn/go-colorable","ecosystem":"go","requirements":"v0.1.6","direct":false,"kind":"runtime","optional":false},{"id":13854491182,"package_name":"github.com/mattn/go-colorable","ecosystem":"go","requirements":"v0.1.9","direct":false,"kind":"runtime","optional":false},{"id":13854491183,"package_name":"github.com/mattn/go-colorable","ecosystem":"go","requirements":"v0.1.12","direct":false,"kind":"runtime","optional":false},{"id":13854491184,"package_name":"github.com/mattn/go-colorable","ecosystem":"go","requirements":"v0.1.13","direct":false,"kind":"runtime","optional":false},{"id":13854491185,"package_name":"github.com/mattn/go-isatty","ecosystem":"go","requirements":"v0.0.3","direct":false,"kind":"runtime","optional":false},{"id":13854491186,"package_name":"github.com/mattn/go-isatty","ecosystem":"go","requirements":"v0.0.8","direct":false,"kind":"runtime","optional":false},{"id":13854491187,"package_name":"github.com/mattn/go-isatty","ecosystem":"go","requirements":"v0.0.10","direct":false,"kind":"runtime","optional":false},{"id":13854491188,"package_name":"github.com/mattn/go-isatty","ecosystem":"go","requirements":"v0.0.11","direct":false,"kind":"runtime","optional":false},{"id":13854491189,"package_name":"github.com/mattn/go-isatty","ecosystem":"go","requirements":"v0.0.12","direct":false,"kind":"runtime","optional":false},{"id":13854491190,"package_name":"github.com/mattn/go-isatty","ecosystem":"go","requirements":"v0.0.14","direct":false,"kind":"runtime","optional":false},{"id":13854491191,"package_name":"github.com/mattn/go-isatty","ecosystem":"go","requirements":"v0.0.16","direct":false,"kind":"runtime","optional":false},{"id":13854491192,"package_name":"github.com/mattn/go-isatty","ecosystem":"go","requirements":"v0.0.18","direct":false,"kind":"runtime","optional":false},{"id":13854491193,"package_name":"github.com/mattn/go-localereader","ecosystem":"go","requirements":"v0.0.2-0.20220822084749-2491eb6c1c75","direct":false,"kind":"runtime","optional":false},{"id":13854491194,"package_name":"github.com/mattn/go-runewidth","ecosystem":"go","requirements":"v0.0.9","direct":false,"kind":"runtime","optional":false},{"id":13854491195,"package_name":"github.com/mattn/go-runewidth","ecosystem":"go","requirements":"v0.0.12","direct":false,"kind":"runtime","optional":false},{"id":13854491196,"package_name":"github.com/mattn/go-runewidth","ecosystem":"go","requirements":"v0.0.14","direct":false,"kind":"runtime","optional":false},{"id":13854491197,"package_name":"github.com/mattn/go-sqlite3","ecosystem":"go","requirements":"v1.14.16","direct":false,"kind":"runtime","optional":false},{"id":13854491198,"package_name":"github.com/matttproud/golang_protobuf_extensions","ecosystem":"go","requirements":"v1.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854491199,"package_name":"github.com/mgutz/ansi","ecosystem":"go","requirements":"v0.0.0-20200706080929-d51e80ef957d","direct":false,"kind":"runtime","optional":false},{"id":13854491200,"package_name":"github.com/mholt/archiver/v3","ecosystem":"go","requirements":"v3.5.1","direct":false,"kind":"runtime","optional":false},{"id":13854491201,"package_name":"github.com/microsoft/go-rustaudit","ecosystem":"go","requirements":"v0.0.0-20220730194248-4b17361d90a5","direct":false,"kind":"runtime","optional":false},{"id":13854491202,"package_name":"github.com/miekg/dns","ecosystem":"go","requirements":"v1.0.14","direct":false,"kind":"runtime","optional":false},{"id":13854491203,"package_name":"github.com/miekg/dns","ecosystem":"go","requirements":"v1.1.26","direct":false,"kind":"runtime","optional":false},{"id":13854491204,"package_name":"github.com/miekg/dns","ecosystem":"go","requirements":"v1.1.41","direct":false,"kind":"runtime","optional":false},{"id":13854491205,"package_name":"github.com/mitchellh/cli","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491206,"package_name":"github.com/mitchellh/copystructure","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491207,"package_name":"github.com/mitchellh/copystructure","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491208,"package_name":"github.com/mitchellh/go-homedir","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491209,"package_name":"github.com/mitchellh/go-testing-interface","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491210,"package_name":"github.com/mitchellh/hashstructure/v2","ecosystem":"go","requirements":"v2.0.2","direct":false,"kind":"runtime","optional":false},{"id":13854491211,"package_name":"github.com/mitchellh/mapstructure","ecosystem":"go","requirements":"v0.0.0-20160808181253-ca63d7c062ee","direct":false,"kind":"runtime","optional":false},{"id":13854491212,"package_name":"github.com/mitchellh/mapstructure","ecosystem":"go","requirements":"v1.1.2","direct":false,"kind":"runtime","optional":false},{"id":13854491213,"package_name":"github.com/mitchellh/mapstructure","ecosystem":"go","requirements":"v1.4.3","direct":false,"kind":"runtime","optional":false},{"id":13854491214,"package_name":"github.com/mitchellh/mapstructure","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854491215,"package_name":"github.com/mitchellh/reflectwalk","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491216,"package_name":"github.com/mitchellh/reflectwalk","ecosystem":"go","requirements":"v1.0.2","direct":false,"kind":"runtime","optional":false},{"id":13854491217,"package_name":"github.com/moby/locker","ecosystem":"go","requirements":"v1.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854491218,"package_name":"github.com/moby/sys/mountinfo","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854491219,"package_name":"github.com/moby/sys/mountinfo","ecosystem":"go","requirements":"v0.6.2","direct":false,"kind":"runtime","optional":false},{"id":13854491220,"package_name":"github.com/moby/sys/sequential","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854491221,"package_name":"github.com/moby/sys/signal","ecosystem":"go","requirements":"v0.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854491222,"package_name":"github.com/moby/term","ecosystem":"go","requirements":"v0.0.0-20221205130635-1aeaba878587","direct":false,"kind":"runtime","optional":false},{"id":13854491223,"package_name":"github.com/modern-go/concurrent","ecosystem":"go","requirements":"v0.0.0-20180228061459-e0a39a4cb421","direct":false,"kind":"runtime","optional":false},{"id":13854491224,"package_name":"github.com/modern-go/concurrent","ecosystem":"go","requirements":"v0.0.0-20180306012644-bacd9c7ef1dd","direct":false,"kind":"runtime","optional":false},{"id":13854491225,"package_name":"github.com/modern-go/reflect2","ecosystem":"go","requirements":"v0.0.0-20180701023420-4b7aa43c6742","direct":false,"kind":"runtime","optional":false},{"id":13854491226,"package_name":"github.com/modern-go/reflect2","ecosystem":"go","requirements":"v1.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854491227,"package_name":"github.com/modern-go/reflect2","ecosystem":"go","requirements":"v1.0.2","direct":false,"kind":"runtime","optional":false},{"id":13854491228,"package_name":"github.com/morikuni/aec","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491229,"package_name":"github.com/mrunalp/fileutils","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854491230,"package_name":"github.com/muesli/ansi","ecosystem":"go","requirements":"v0.0.0-20211031195517-c9f0611b6c70","direct":false,"kind":"runtime","optional":false},{"id":13854491231,"package_name":"github.com/muesli/cancelreader","ecosystem":"go","requirements":"v0.2.2","direct":false,"kind":"runtime","optional":false},{"id":13854491232,"package_name":"github.com/muesli/reflow","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854491233,"package_name":"github.com/muesli/termenv","ecosystem":"go","requirements":"v0.15.2","direct":false,"kind":"runtime","optional":false},{"id":13854491234,"package_name":"github.com/mwitkow/go-conntrack","ecosystem":"go","requirements":"v0.0.0-20161129095857-cc309e4a2223","direct":false,"kind":"runtime","optional":false},{"id":13854491235,"package_name":"github.com/nwaples/rardecode","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491236,"package_name":"github.com/olekukonko/tablewriter","ecosystem":"go","requirements":"v0.0.5","direct":false,"kind":"runtime","optional":false},{"id":13854491237,"package_name":"github.com/onsi/gomega","ecosystem":"go","requirements":"v1.27.10","direct":false,"kind":"runtime","optional":false},{"id":13854491238,"package_name":"github.com/opencontainers/go-digest","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491239,"package_name":"github.com/opencontainers/image-spec","ecosystem":"go","requirements":"v1.1.0-rc3","direct":false,"kind":"runtime","optional":false},{"id":13854491240,"package_name":"github.com/opencontainers/runc","ecosystem":"go","requirements":"v1.1.5","direct":false,"kind":"runtime","optional":false},{"id":13854491241,"package_name":"github.com/opencontainers/runtime-spec","ecosystem":"go","requirements":"v1.0.3-0.20210326190908-1c3f411f0417","direct":false,"kind":"runtime","optional":false},{"id":13854491242,"package_name":"github.com/opencontainers/runtime-spec","ecosystem":"go","requirements":"v1.1.0-rc.1","direct":false,"kind":"runtime","optional":false},{"id":13854491243,"package_name":"github.com/opencontainers/selinux","ecosystem":"go","requirements":"v1.10.0","direct":false,"kind":"runtime","optional":false},{"id":13854491244,"package_name":"github.com/opencontainers/selinux","ecosystem":"go","requirements":"v1.11.0","direct":false,"kind":"runtime","optional":false},{"id":13854491245,"package_name":"github.com/pascaldekloe/goe","ecosystem":"go","requirements":"v0.0.0-20180627143212-57f6aae5913c","direct":false,"kind":"runtime","optional":false},{"id":13854491246,"package_name":"github.com/pascaldekloe/goe","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491247,"package_name":"github.com/pborman/indent","ecosystem":"go","requirements":"v1.2.1","direct":false,"kind":"runtime","optional":false},{"id":13854491248,"package_name":"github.com/pelletier/go-toml","ecosystem":"go","requirements":"v1.9.4","direct":false,"kind":"runtime","optional":false},{"id":13854491249,"package_name":"github.com/pelletier/go-toml","ecosystem":"go","requirements":"v1.9.5","direct":false,"kind":"runtime","optional":false},{"id":13854491250,"package_name":"github.com/pelletier/go-toml/v2","ecosystem":"go","requirements":"v2.0.8","direct":false,"kind":"runtime","optional":false},{"id":13854491251,"package_name":"github.com/pierrec/lz4/v4","ecosystem":"go","requirements":"v4.1.2","direct":false,"kind":"runtime","optional":false},{"id":13854491252,"package_name":"github.com/pierrec/lz4/v4","ecosystem":"go","requirements":"v4.1.15","direct":false,"kind":"runtime","optional":false},{"id":13854491253,"package_name":"github.com/pjbgf/sha1cd","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854491254,"package_name":"github.com/pkg/diff","ecosystem":"go","requirements":"v0.0.0-20210226163009-20ebb0f2a09e","direct":false,"kind":"runtime","optional":false},{"id":13854491255,"package_name":"github.com/pkg/errors","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":13854491256,"package_name":"github.com/pkg/errors","ecosystem":"go","requirements":"v0.8.1","direct":false,"kind":"runtime","optional":false},{"id":13854491257,"package_name":"github.com/pkg/errors","ecosystem":"go","requirements":"v0.9.1","direct":false,"kind":"runtime","optional":false},{"id":13854491258,"package_name":"github.com/pkg/profile","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854491259,"package_name":"github.com/pkg/sftp","ecosystem":"go","requirements":"v1.10.1","direct":false,"kind":"runtime","optional":false},{"id":13854491260,"package_name":"github.com/pkg/sftp","ecosystem":"go","requirements":"v1.13.1","direct":false,"kind":"runtime","optional":false},{"id":13854491261,"package_name":"github.com/pmezard/go-difflib","ecosystem":"go","requirements":"v0.0.0-20151028094244-d8ed2627bdf0","direct":false,"kind":"runtime","optional":false},{"id":13854491262,"package_name":"github.com/pmezard/go-difflib","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491263,"package_name":"github.com/posener/complete","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854491264,"package_name":"github.com/posener/complete","ecosystem":"go","requirements":"v1.2.3","direct":false,"kind":"runtime","optional":false},{"id":13854491265,"package_name":"github.com/prometheus/client_golang","ecosystem":"go","requirements":"v0.9.1","direct":false,"kind":"runtime","optional":false},{"id":13854491266,"package_name":"github.com/prometheus/client_golang","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491267,"package_name":"github.com/prometheus/client_golang","ecosystem":"go","requirements":"v1.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854491268,"package_name":"github.com/prometheus/client_model","ecosystem":"go","requirements":"v0.0.0-20180712105110-5c3871d89910","direct":false,"kind":"runtime","optional":false},{"id":13854491269,"package_name":"github.com/prometheus/client_model","ecosystem":"go","requirements":"v0.0.0-20190129233127-fd36f4220a90","direct":false,"kind":"runtime","optional":false},{"id":13854491270,"package_name":"github.com/prometheus/client_model","ecosystem":"go","requirements":"v0.0.0-20190812154241-14fe0d1b01d4","direct":false,"kind":"runtime","optional":false},{"id":13854491271,"package_name":"github.com/prometheus/client_model","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491272,"package_name":"github.com/prometheus/common","ecosystem":"go","requirements":"v0.4.1","direct":false,"kind":"runtime","optional":false},{"id":13854491273,"package_name":"github.com/prometheus/common","ecosystem":"go","requirements":"v0.9.1","direct":false,"kind":"runtime","optional":false},{"id":13854491274,"package_name":"github.com/prometheus/procfs","ecosystem":"go","requirements":"v0.0.0-20181005140218-185b4288413d","direct":false,"kind":"runtime","optional":false},{"id":13854491275,"package_name":"github.com/prometheus/procfs","ecosystem":"go","requirements":"v0.0.2","direct":false,"kind":"runtime","optional":false},{"id":13854491276,"package_name":"github.com/prometheus/procfs","ecosystem":"go","requirements":"v0.0.8","direct":false,"kind":"runtime","optional":false},{"id":13854491277,"package_name":"github.com/prometheus/procfs","ecosystem":"go","requirements":"v0.6.0","direct":false,"kind":"runtime","optional":false},{"id":13854491278,"package_name":"github.com/prometheus/procfs","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":13854491279,"package_name":"github.com/remyoudompheng/bigfft","ecosystem":"go","requirements":"v0.0.0-20200410134404-eec4a21b6bb0","direct":false,"kind":"runtime","optional":false},{"id":13854491280,"package_name":"github.com/remyoudompheng/bigfft","ecosystem":"go","requirements":"v0.0.0-20230129092748-24d4a6f8daec","direct":false,"kind":"runtime","optional":false},{"id":13854491281,"package_name":"github.com/rivo/uniseg","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491282,"package_name":"github.com/rivo/uniseg","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491283,"package_name":"github.com/rogpeppe/fastuuid","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491284,"package_name":"github.com/rogpeppe/go-internal","ecosystem":"go","requirements":"v1.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854491285,"package_name":"github.com/rogpeppe/go-internal","ecosystem":"go","requirements":"v1.9.0","direct":false,"kind":"runtime","optional":false},{"id":13854491286,"package_name":"github.com/rogpeppe/go-internal","ecosystem":"go","requirements":"v1.11.0","direct":false,"kind":"runtime","optional":false},{"id":13854491287,"package_name":"github.com/russross/blackfriday/v2","ecosystem":"go","requirements":"v2.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854491288,"package_name":"github.com/russross/blackfriday/v2","ecosystem":"go","requirements":"v2.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491289,"package_name":"github.com/ryanuber/columnize","ecosystem":"go","requirements":"v0.0.0-20160712163229-9b3edd62028f","direct":false,"kind":"runtime","optional":false},{"id":13854491290,"package_name":"github.com/saferwall/pe","ecosystem":"go","requirements":"v1.4.5","direct":false,"kind":"runtime","optional":false},{"id":13854491291,"package_name":"github.com/sagikazarmark/crypt","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854491292,"package_name":"github.com/saintfish/chardet","ecosystem":"go","requirements":"v0.0.0-20230101081208-5e3ef4b5456d","direct":false,"kind":"runtime","optional":false},{"id":13854491293,"package_name":"github.com/sanity-io/litter","ecosystem":"go","requirements":"v1.5.5","direct":false,"kind":"runtime","optional":false},{"id":13854491294,"package_name":"github.com/sassoftware/go-rpmutils","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491295,"package_name":"github.com/scylladb/go-set","ecosystem":"go","requirements":"v1.0.3-0.20200225121959-cc7b2070d91e","direct":false,"kind":"runtime","optional":false},{"id":13854491296,"package_name":"github.com/sean-/seed","ecosystem":"go","requirements":"v0.0.0-20170313163322-e2103e2c3529","direct":false,"kind":"runtime","optional":false},{"id":13854491297,"package_name":"github.com/sebdah/goldie/v2","ecosystem":"go","requirements":"v2.5.3","direct":false,"kind":"runtime","optional":false},{"id":13854491298,"package_name":"github.com/seccomp/libseccomp-golang","ecosystem":"go","requirements":"v0.9.2-0.20220502022130-f33da4d89646","direct":false,"kind":"runtime","optional":false},{"id":13854491299,"package_name":"github.com/sergi/go-diff","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491300,"package_name":"github.com/sergi/go-diff","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491301,"package_name":"github.com/sergi/go-diff","ecosystem":"go","requirements":"v1.3.1","direct":false,"kind":"runtime","optional":false},{"id":13854491302,"package_name":"github.com/shopspring/decimal","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491303,"package_name":"github.com/shurcooL/sanitized_anchor_name","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491304,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491305,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.4.2","direct":false,"kind":"runtime","optional":false},{"id":13854491306,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854491307,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.8.1","direct":false,"kind":"runtime","optional":false},{"id":13854491308,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.9.0","direct":false,"kind":"runtime","optional":false},{"id":13854491309,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.9.3","direct":false,"kind":"runtime","optional":false},{"id":13854491310,"package_name":"github.com/skeema/knownhosts","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491311,"package_name":"github.com/spaolacci/murmur3","ecosystem":"go","requirements":"v0.0.0-20180118202830-f09979ecbc72","direct":false,"kind":"runtime","optional":false},{"id":13854491312,"package_name":"github.com/spdx/gordf","ecosystem":"go","requirements":"v0.0.0-20201111095634-7098f93598fb","direct":false,"kind":"runtime","optional":false},{"id":13854491313,"package_name":"github.com/spdx/tools-golang","ecosystem":"go","requirements":"v0.5.3","direct":false,"kind":"runtime","optional":false},{"id":13854491314,"package_name":"github.com/spf13/afero","ecosystem":"go","requirements":"v1.3.3","direct":false,"kind":"runtime","optional":false},{"id":13854491315,"package_name":"github.com/spf13/afero","ecosystem":"go","requirements":"v1.6.0","direct":false,"kind":"runtime","optional":false},{"id":13854491316,"package_name":"github.com/spf13/afero","ecosystem":"go","requirements":"v1.9.5","direct":false,"kind":"runtime","optional":false},{"id":13854491317,"package_name":"github.com/spf13/cast","ecosystem":"go","requirements":"v1.3.1","direct":false,"kind":"runtime","optional":false},{"id":13854491318,"package_name":"github.com/spf13/cast","ecosystem":"go","requirements":"v1.4.1","direct":false,"kind":"runtime","optional":false},{"id":13854491319,"package_name":"github.com/spf13/cast","ecosystem":"go","requirements":"v1.5.1","direct":false,"kind":"runtime","optional":false},{"id":13854491320,"package_name":"github.com/spf13/cobra","ecosystem":"go","requirements":"v1.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854491321,"package_name":"github.com/spf13/cobra","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854491322,"package_name":"github.com/spf13/jwalterweatherman","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491323,"package_name":"github.com/spf13/pflag","ecosystem":"go","requirements":"v1.0.5","direct":false,"kind":"runtime","optional":false},{"id":13854491324,"package_name":"github.com/spf13/viper","ecosystem":"go","requirements":"v1.10.0","direct":false,"kind":"runtime","optional":false},{"id":13854491325,"package_name":"github.com/spf13/viper","ecosystem":"go","requirements":"v1.16.0","direct":false,"kind":"runtime","optional":false},{"id":13854491326,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491327,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854491328,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854491329,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854491330,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v0.0.0-20161117074351-18a02ba4a312","direct":false,"kind":"runtime","optional":false},{"id":13854491331,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.2.2","direct":false,"kind":"runtime","optional":false},{"id":13854491332,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854491333,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.3.1-0.20190311161405-34c6fa2dc709","direct":false,"kind":"runtime","optional":false},{"id":13854491334,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854491335,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.5.1","direct":false,"kind":"runtime","optional":false},{"id":13854491336,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.6.1","direct":false,"kind":"runtime","optional":false},{"id":13854491337,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854491338,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.7.1","direct":false,"kind":"runtime","optional":false},{"id":13854491339,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.8.0","direct":false,"kind":"runtime","optional":false},{"id":13854491340,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.8.1","direct":false,"kind":"runtime","optional":false},{"id":13854491341,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.8.3","direct":false,"kind":"runtime","optional":false},{"id":13854491342,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.8.4","direct":false,"kind":"runtime","optional":false},{"id":13854491343,"package_name":"github.com/subosito/gotenv","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491344,"package_name":"github.com/subosito/gotenv","ecosystem":"go","requirements":"v1.4.2","direct":false,"kind":"runtime","optional":false},{"id":13854491345,"package_name":"github.com/sylabs/sif/v2","ecosystem":"go","requirements":"v2.11.5","direct":false,"kind":"runtime","optional":false},{"id":13854491346,"package_name":"github.com/sylabs/squashfs","ecosystem":"go","requirements":"v0.6.1","direct":false,"kind":"runtime","optional":false},{"id":13854491347,"package_name":"github.com/syndtr/gocapability","ecosystem":"go","requirements":"v0.0.0-20200815063812-42c35b437635","direct":false,"kind":"runtime","optional":false},{"id":13854491348,"package_name":"github.com/terminalstatic/go-xsd-validate","ecosystem":"go","requirements":"v0.1.5","direct":false,"kind":"runtime","optional":false},{"id":13854491349,"package_name":"github.com/therootcompany/xz","ecosystem":"go","requirements":"v1.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854491350,"package_name":"github.com/tidwall/gjson","ecosystem":"go","requirements":"v1.14.2","direct":false,"kind":"runtime","optional":false},{"id":13854491351,"package_name":"github.com/tidwall/gjson","ecosystem":"go","requirements":"v1.16.0","direct":false,"kind":"runtime","optional":false},{"id":13854491352,"package_name":"github.com/tidwall/match","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854491353,"package_name":"github.com/tidwall/pretty","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491354,"package_name":"github.com/tidwall/pretty","ecosystem":"go","requirements":"v1.2.1","direct":false,"kind":"runtime","optional":false},{"id":13854491355,"package_name":"github.com/tidwall/sjson","ecosystem":"go","requirements":"v1.2.5","direct":false,"kind":"runtime","optional":false},{"id":13854491356,"package_name":"github.com/tv42/httpunix","ecosystem":"go","requirements":"v0.0.0-20150427012821-b75d8614f926","direct":false,"kind":"runtime","optional":false},{"id":13854491357,"package_name":"github.com/ulikunitz/xz","ecosystem":"go","requirements":"v0.5.8","direct":false,"kind":"runtime","optional":false},{"id":13854491358,"package_name":"github.com/ulikunitz/xz","ecosystem":"go","requirements":"v0.5.9","direct":false,"kind":"runtime","optional":false},{"id":13854491359,"package_name":"github.com/ulikunitz/xz","ecosystem":"go","requirements":"v0.5.10","direct":false,"kind":"runtime","optional":false},{"id":13854491360,"package_name":"github.com/urfave/cli","ecosystem":"go","requirements":"v1.22.1","direct":false,"kind":"runtime","optional":false},{"id":13854491361,"package_name":"github.com/urfave/cli","ecosystem":"go","requirements":"v1.22.12","direct":false,"kind":"runtime","optional":false},{"id":13854491362,"package_name":"github.com/urfave/cli/v2","ecosystem":"go","requirements":"v2.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854491363,"package_name":"github.com/vbatts/go-mtree","ecosystem":"go","requirements":"v0.5.3","direct":false,"kind":"runtime","optional":false},{"id":13854491364,"package_name":"github.com/vbatts/tar-split","ecosystem":"go","requirements":"v0.11.3","direct":false,"kind":"runtime","optional":false},{"id":13854491365,"package_name":"github.com/vifraa/gopom","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491366,"package_name":"github.com/vishvananda/netlink","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491367,"package_name":"github.com/vishvananda/netns","ecosystem":"go","requirements":"v0.0.0-20191106174202-0a2b9b5464df","direct":false,"kind":"runtime","optional":false},{"id":13854491368,"package_name":"github.com/wagoodman/go-partybus","ecosystem":"go","requirements":"v0.0.0-20230516145632-8ccac152c651","direct":false,"kind":"runtime","optional":false},{"id":13854491369,"package_name":"github.com/wagoodman/go-progress","ecosystem":"go","requirements":"v0.0.0-20230911172108-cf810b7e365c","direct":false,"kind":"runtime","optional":false},{"id":13854491370,"package_name":"github.com/xanzy/ssh-agent","ecosystem":"go","requirements":"v0.3.3","direct":false,"kind":"runtime","optional":false},{"id":13854491371,"package_name":"github.com/xeipuuv/gojsonpointer","ecosystem":"go","requirements":"v0.0.0-20180127040702-4e3ac2762d5f","direct":false,"kind":"runtime","optional":false},{"id":13854491372,"package_name":"github.com/xeipuuv/gojsonpointer","ecosystem":"go","requirements":"v0.0.0-20190905194746-02993c407bfb","direct":false,"kind":"runtime","optional":false},{"id":13854491373,"package_name":"github.com/xeipuuv/gojsonreference","ecosystem":"go","requirements":"v0.0.0-20180127040603-bd5ef7bd5415","direct":false,"kind":"runtime","optional":false},{"id":13854491374,"package_name":"github.com/xeipuuv/gojsonschema","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491375,"package_name":"github.com/xi2/xz","ecosystem":"go","requirements":"v0.0.0-20171230120015-48954b6210f8","direct":false,"kind":"runtime","optional":false},{"id":13854491376,"package_name":"github.com/xo/terminfo","ecosystem":"go","requirements":"v0.0.0-20210125001918-ca9a967f8778","direct":false,"kind":"runtime","optional":false},{"id":13854491377,"package_name":"github.com/yuin/goldmark","ecosystem":"go","requirements":"v1.1.25","direct":false,"kind":"runtime","optional":false},{"id":13854491378,"package_name":"github.com/yuin/goldmark","ecosystem":"go","requirements":"v1.1.27","direct":false,"kind":"runtime","optional":false},{"id":13854491379,"package_name":"github.com/yuin/goldmark","ecosystem":"go","requirements":"v1.1.32","direct":false,"kind":"runtime","optional":false},{"id":13854491380,"package_name":"github.com/yuin/goldmark","ecosystem":"go","requirements":"v1.2.1","direct":false,"kind":"runtime","optional":false},{"id":13854491381,"package_name":"github.com/yuin/goldmark","ecosystem":"go","requirements":"v1.3.5","direct":false,"kind":"runtime","optional":false},{"id":13854491382,"package_name":"github.com/yuin/goldmark","ecosystem":"go","requirements":"v1.4.13","direct":false,"kind":"runtime","optional":false},{"id":13854491383,"package_name":"github.com/zyedidia/generic","ecosystem":"go","requirements":"v1.2.2-0.20230320175451-4410d2372cb1","direct":false,"kind":"runtime","optional":false},{"id":13854491384,"package_name":"go.etcd.io/etcd/api/v3","ecosystem":"go","requirements":"v3.5.1","direct":false,"kind":"runtime","optional":false},{"id":13854491385,"package_name":"go.etcd.io/etcd/client/pkg/v3","ecosystem":"go","requirements":"v3.5.1","direct":false,"kind":"runtime","optional":false},{"id":13854491386,"package_name":"go.etcd.io/etcd/client/v2","ecosystem":"go","requirements":"v2.305.1","direct":false,"kind":"runtime","optional":false},{"id":13854491387,"package_name":"go.mozilla.org/pkcs7","ecosystem":"go","requirements":"v0.0.0-20210826202110-33d05740a352","direct":false,"kind":"runtime","optional":false},{"id":13854491388,"package_name":"go.opencensus.io","ecosystem":"go","requirements":"v0.21.0","direct":false,"kind":"runtime","optional":false},{"id":13854491389,"package_name":"go.opencensus.io","ecosystem":"go","requirements":"v0.22.0","direct":false,"kind":"runtime","optional":false},{"id":13854491390,"package_name":"go.opencensus.io","ecosystem":"go","requirements":"v0.22.2","direct":false,"kind":"runtime","optional":false},{"id":13854491391,"package_name":"go.opencensus.io","ecosystem":"go","requirements":"v0.22.3","direct":false,"kind":"runtime","optional":false},{"id":13854491392,"package_name":"go.opencensus.io","ecosystem":"go","requirements":"v0.22.4","direct":false,"kind":"runtime","optional":false},{"id":13854491393,"package_name":"go.opencensus.io","ecosystem":"go","requirements":"v0.22.5","direct":false,"kind":"runtime","optional":false},{"id":13854491394,"package_name":"go.opencensus.io","ecosystem":"go","requirements":"v0.23.0","direct":false,"kind":"runtime","optional":false},{"id":13854491395,"package_name":"go.opencensus.io","ecosystem":"go","requirements":"v0.24.0","direct":false,"kind":"runtime","optional":false},{"id":13854491396,"package_name":"go.opentelemetry.io/otel","ecosystem":"go","requirements":"v1.14.0","direct":false,"kind":"runtime","optional":false},{"id":13854491397,"package_name":"go.opentelemetry.io/otel/trace","ecosystem":"go","requirements":"v1.14.0","direct":false,"kind":"runtime","optional":false},{"id":13854491398,"package_name":"go.opentelemetry.io/proto/otlp","ecosystem":"go","requirements":"v0.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854491399,"package_name":"go.uber.org/atomic","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854491400,"package_name":"go.uber.org/goleak","ecosystem":"go","requirements":"v1.1.10","direct":false,"kind":"runtime","optional":false},{"id":13854491401,"package_name":"go.uber.org/goleak","ecosystem":"go","requirements":"v1.1.12","direct":false,"kind":"runtime","optional":false},{"id":13854491402,"package_name":"go.uber.org/multierr","ecosystem":"go","requirements":"v1.6.0","direct":false,"kind":"runtime","optional":false},{"id":13854491403,"package_name":"go.uber.org/zap","ecosystem":"go","requirements":"v1.17.0","direct":false,"kind":"runtime","optional":false},{"id":13854491404,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20180904163835-0709b304e793","direct":false,"kind":"runtime","optional":false},{"id":13854491405,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20181029021203-45a5f77698d3","direct":false,"kind":"runtime","optional":false},{"id":13854491406,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20190308221718-c2843e01d9a2","direct":false,"kind":"runtime","optional":false},{"id":13854491407,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20190510104115-cbcb75029529","direct":false,"kind":"runtime","optional":false},{"id":13854491408,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20190605123033-f99c8df09eb5","direct":false,"kind":"runtime","optional":false},{"id":13854491409,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20190820162420-60c769a6c586","direct":false,"kind":"runtime","optional":false},{"id":13854491410,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20190923035154-9ee001bba392","direct":false,"kind":"runtime","optional":false},{"id":13854491411,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20191011191535-87dc89f01550","direct":false,"kind":"runtime","optional":false},{"id":13854491412,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20200622213623-75b288015ac9","direct":false,"kind":"runtime","optional":false},{"id":13854491413,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20201221181555-eec23a3978ad","direct":false,"kind":"runtime","optional":false},{"id":13854491414,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20210421170649-83a5a9bb288b","direct":false,"kind":"runtime","optional":false},{"id":13854491415,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20210817164053-32db794688a5","direct":false,"kind":"runtime","optional":false},{"id":13854491416,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20210921155107-089bfa567519","direct":false,"kind":"runtime","optional":false},{"id":13854491417,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20220622213112-05595931fe9d","direct":false,"kind":"runtime","optional":false},{"id":13854491418,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.0.0-20220722155217-630584e8d5aa","direct":false,"kind":"runtime","optional":false},{"id":13854491419,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854491420,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.3.1-0.20221117191849-2c476679df9a","direct":false,"kind":"runtime","optional":false},{"id":13854491421,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854491422,"package_name":"golang.org/x/crypto","ecosystem":"go","requirements":"v0.13.0","direct":false,"kind":"runtime","optional":false},{"id":13854491423,"package_name":"golang.org/x/exp","ecosystem":"go","requirements":"v0.0.0-20190121172915-509febef88a4","direct":false,"kind":"runtime","optional":false},{"id":13854491424,"package_name":"golang.org/x/exp","ecosystem":"go","requirements":"v0.0.0-20190306152737-a1d7652674e8","direct":false,"kind":"runtime","optional":false},{"id":13854491425,"package_name":"golang.org/x/exp","ecosystem":"go","requirements":"v0.0.0-20190510132918-efd6b22b2522","direct":false,"kind":"runtime","optional":false},{"id":13854491426,"package_name":"golang.org/x/exp","ecosystem":"go","requirements":"v0.0.0-20190829153037-c13cbed26979","direct":false,"kind":"runtime","optional":false},{"id":13854491427,"package_name":"golang.org/x/exp","ecosystem":"go","requirements":"v0.0.0-20191030013958-a1ab85dbe136","direct":false,"kind":"runtime","optional":false},{"id":13854491428,"package_name":"golang.org/x/exp","ecosystem":"go","requirements":"v0.0.0-20191129062945-2f5052295587","direct":false,"kind":"runtime","optional":false},{"id":13854491429,"package_name":"golang.org/x/exp","ecosystem":"go","requirements":"v0.0.0-20191227195350-da58074b4299","direct":false,"kind":"runtime","optional":false},{"id":13854491430,"package_name":"golang.org/x/exp","ecosystem":"go","requirements":"v0.0.0-20200119233911-0405dc783f0a","direct":false,"kind":"runtime","optional":false},{"id":13854491431,"package_name":"golang.org/x/exp","ecosystem":"go","requirements":"v0.0.0-20200207192155-f17229e696bd","direct":false,"kind":"runtime","optional":false},{"id":13854491432,"package_name":"golang.org/x/exp","ecosystem":"go","requirements":"v0.0.0-20200224162631-6cc2880d07d6","direct":false,"kind":"runtime","optional":false},{"id":13854491433,"package_name":"golang.org/x/image","ecosystem":"go","requirements":"v0.0.0-20190227222117-0694c2d4d067","direct":false,"kind":"runtime","optional":false},{"id":13854491434,"package_name":"golang.org/x/image","ecosystem":"go","requirements":"v0.0.0-20190802002840-cff245a6509b","direct":false,"kind":"runtime","optional":false},{"id":13854491435,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20181026193005-c67002cb31c3","direct":false,"kind":"runtime","optional":false},{"id":13854491436,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20190227174305-5b3e6a55c961","direct":false,"kind":"runtime","optional":false},{"id":13854491437,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20190301231843-5614ed5bae6f","direct":false,"kind":"runtime","optional":false},{"id":13854491438,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20190313153728-d0100b6bd8b3","direct":false,"kind":"runtime","optional":false},{"id":13854491439,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20190409202823-959b441ac422","direct":false,"kind":"runtime","optional":false},{"id":13854491440,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20190909230951-414d861bb4ac","direct":false,"kind":"runtime","optional":false},{"id":13854491441,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20190930215403-16217165b5de","direct":false,"kind":"runtime","optional":false},{"id":13854491442,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20191125180803-fdd1cda4f05f","direct":false,"kind":"runtime","optional":false},{"id":13854491443,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20200130185559-910be7a94367","direct":false,"kind":"runtime","optional":false},{"id":13854491444,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20200302205851-738671d3881b","direct":false,"kind":"runtime","optional":false},{"id":13854491445,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20201208152925-83fdc39ff7b5","direct":false,"kind":"runtime","optional":false},{"id":13854491446,"package_name":"golang.org/x/lint","ecosystem":"go","requirements":"v0.0.0-20210508222113-6edffad5e616","direct":false,"kind":"runtime","optional":false},{"id":13854491447,"package_name":"golang.org/x/mobile","ecosystem":"go","requirements":"v0.0.0-20190312151609-d3739f865fa6","direct":false,"kind":"runtime","optional":false},{"id":13854491448,"package_name":"golang.org/x/mobile","ecosystem":"go","requirements":"v0.0.0-20190719004257-d2bd2a29d028","direct":false,"kind":"runtime","optional":false},{"id":13854491449,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.0.0-20190513183733-4bf6d317e70e","direct":false,"kind":"runtime","optional":false},{"id":13854491450,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491451,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.1.1-0.20191105210325-c90efee705ee","direct":false,"kind":"runtime","optional":false},{"id":13854491452,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.1.1-0.20191107180719-034126e5016b","direct":false,"kind":"runtime","optional":false},{"id":13854491453,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491454,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854491455,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854491456,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.4.1","direct":false,"kind":"runtime","optional":false},{"id":13854491457,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.4.2","direct":false,"kind":"runtime","optional":false},{"id":13854491458,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854491459,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.6.0-dev.0.20220419223038-86c51ed26bb4","direct":false,"kind":"runtime","optional":false},{"id":13854491460,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":13854491461,"package_name":"golang.org/x/mod","ecosystem":"go","requirements":"v0.12.0","direct":false,"kind":"runtime","optional":false},{"id":13854491462,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20180724234803-3673e40ba225","direct":false,"kind":"runtime","optional":false},{"id":13854491463,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20180826012351-8a410e7b638d","direct":false,"kind":"runtime","optional":false},{"id":13854491464,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20181023162649-9b4f9f5ad519","direct":false,"kind":"runtime","optional":false},{"id":13854491465,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20181114220301-adae6a3d119a","direct":false,"kind":"runtime","optional":false},{"id":13854491466,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190108225652-1e06a53dbb7e","direct":false,"kind":"runtime","optional":false},{"id":13854491467,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190213061140-3a22650c66bd","direct":false,"kind":"runtime","optional":false},{"id":13854491468,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190311183353-d8887717615a","direct":false,"kind":"runtime","optional":false},{"id":13854491469,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190404232315-eb5bcb51f2a3","direct":false,"kind":"runtime","optional":false},{"id":13854491470,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190501004415-9ce7a6920f09","direct":false,"kind":"runtime","optional":false},{"id":13854491471,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190503192946-f4e77d36d62c","direct":false,"kind":"runtime","optional":false},{"id":13854491472,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190603091049-60506f45cf65","direct":false,"kind":"runtime","optional":false},{"id":13854491473,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190613194153-d28f0bde5980","direct":false,"kind":"runtime","optional":false},{"id":13854491474,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190620200207-3b0461eec859","direct":false,"kind":"runtime","optional":false},{"id":13854491475,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190628185345-da137c7871d7","direct":false,"kind":"runtime","optional":false},{"id":13854491476,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190724013045-ca1201d0de80","direct":false,"kind":"runtime","optional":false},{"id":13854491477,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20190923162816-aa69164e4478","direct":false,"kind":"runtime","optional":false},{"id":13854491478,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20191209160850-c0dbc17a3553","direct":false,"kind":"runtime","optional":false},{"id":13854491479,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200114155413-6afb5195e5aa","direct":false,"kind":"runtime","optional":false},{"id":13854491480,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200202094626-16171245cfb2","direct":false,"kind":"runtime","optional":false},{"id":13854491481,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200222125558-5a598a2470a0","direct":false,"kind":"runtime","optional":false},{"id":13854491482,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200226121028-0de0cce0169b","direct":false,"kind":"runtime","optional":false},{"id":13854491483,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200301022130-244492dfa37a","direct":false,"kind":"runtime","optional":false},{"id":13854491484,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200324143707-d3edc9973b7e","direct":false,"kind":"runtime","optional":false},{"id":13854491485,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200501053045-e0ff5e5a1de5","direct":false,"kind":"runtime","optional":false},{"id":13854491486,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200506145744-7e3656a0809f","direct":false,"kind":"runtime","optional":false},{"id":13854491487,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200513185701-a91f0712d120","direct":false,"kind":"runtime","optional":false},{"id":13854491488,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200520182314-0ba52f642ac2","direct":false,"kind":"runtime","optional":false},{"id":13854491489,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200625001655-4c5254603344","direct":false,"kind":"runtime","optional":false},{"id":13854491490,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200707034311-ab3426394381","direct":false,"kind":"runtime","optional":false},{"id":13854491491,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20200822124328-c89045814202","direct":false,"kind":"runtime","optional":false},{"id":13854491492,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20201021035429-f5854403a974","direct":false,"kind":"runtime","optional":false},{"id":13854491493,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20201031054903-ff519b6c9102","direct":false,"kind":"runtime","optional":false},{"id":13854491494,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20201110031124-69a78807bb2b","direct":false,"kind":"runtime","optional":false},{"id":13854491495,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20201209123823-ac852fbbde11","direct":false,"kind":"runtime","optional":false},{"id":13854491496,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20201224014010-6772e930b67b","direct":false,"kind":"runtime","optional":false},{"id":13854491497,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20210119194325-5f4716e94777","direct":false,"kind":"runtime","optional":false},{"id":13854491498,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20210226172049-e18ecbb05110","direct":false,"kind":"runtime","optional":false},{"id":13854491499,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20210316092652-d523dce5a7f4","direct":false,"kind":"runtime","optional":false},{"id":13854491500,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20210405180319-a5a99cb37ef4","direct":false,"kind":"runtime","optional":false},{"id":13854491501,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20210410081132-afb366fc7cd1","direct":false,"kind":"runtime","optional":false},{"id":13854491502,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20210503060351-7fd8e65b6420","direct":false,"kind":"runtime","optional":false},{"id":13854491503,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20210505024714-0287a6fb4125","direct":false,"kind":"runtime","optional":false},{"id":13854491504,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20210813160813-60bc85c4be6d","direct":false,"kind":"runtime","optional":false},{"id":13854491505,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20211112202133-69e39bad7dc2","direct":false,"kind":"runtime","optional":false},{"id":13854491506,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20220722155237-a158d28d115b","direct":false,"kind":"runtime","optional":false},{"id":13854491507,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491508,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.6.0","direct":false,"kind":"runtime","optional":false},{"id":13854491509,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":13854491510,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.15.0","direct":false,"kind":"runtime","optional":false},{"id":13854491511,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20180821212333-d2e6202438be","direct":false,"kind":"runtime","optional":false},{"id":13854491512,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20190226205417-e64efc72b421","direct":false,"kind":"runtime","optional":false},{"id":13854491513,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20190604053449-0f29369cfe45","direct":false,"kind":"runtime","optional":false},{"id":13854491514,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20191202225959-858c2ad4c8b6","direct":false,"kind":"runtime","optional":false},{"id":13854491515,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20200107190931-bf48bf16ab8d","direct":false,"kind":"runtime","optional":false},{"id":13854491516,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20200902213428-5d25da1a8d43","direct":false,"kind":"runtime","optional":false},{"id":13854491517,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20201109201403-9fd604954f58","direct":false,"kind":"runtime","optional":false},{"id":13854491518,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20201208152858-08078c50e5b5","direct":false,"kind":"runtime","optional":false},{"id":13854491519,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20210218202405-ba52d332ba99","direct":false,"kind":"runtime","optional":false},{"id":13854491520,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20210220000619-9bb904979d93","direct":false,"kind":"runtime","optional":false},{"id":13854491521,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20210313182246-cd4f82c27b84","direct":false,"kind":"runtime","optional":false},{"id":13854491522,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20210514164344-f6687ab2804c","direct":false,"kind":"runtime","optional":false},{"id":13854491523,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20210628180205-a41e5a781914","direct":false,"kind":"runtime","optional":false},{"id":13854491524,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20210805134026-6f1e6394065a","direct":false,"kind":"runtime","optional":false},{"id":13854491525,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20210819190943-2bc19b11175f","direct":false,"kind":"runtime","optional":false},{"id":13854491526,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20211005180243-6b3c2da341f1","direct":false,"kind":"runtime","optional":false},{"id":13854491527,"package_name":"golang.org/x/oauth2","ecosystem":"go","requirements":"v0.0.0-20211104180415-d3ed0bb246c8","direct":false,"kind":"runtime","optional":false},{"id":13854491528,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20180314180146-1d60e4601c6f","direct":false,"kind":"runtime","optional":false},{"id":13854491529,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20181108010431-42b317875d0f","direct":false,"kind":"runtime","optional":false},{"id":13854491530,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20181221193216-37e7f081c4d4","direct":false,"kind":"runtime","optional":false},{"id":13854491531,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20190227155943-e225da77a7e6","direct":false,"kind":"runtime","optional":false},{"id":13854491532,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20190423024810-112230192c58","direct":false,"kind":"runtime","optional":false},{"id":13854491533,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20190911185100-cd5d95a43a6e","direct":false,"kind":"runtime","optional":false},{"id":13854491534,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20200317015054-43a5402ce75a","direct":false,"kind":"runtime","optional":false},{"id":13854491535,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20200625203802-6e8e738ad208","direct":false,"kind":"runtime","optional":false},{"id":13854491536,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20201020160332-67f06af15bc9","direct":false,"kind":"runtime","optional":false},{"id":13854491537,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20201207232520-09787c993a3a","direct":false,"kind":"runtime","optional":false},{"id":13854491538,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20210220032951-036812b2e83c","direct":false,"kind":"runtime","optional":false},{"id":13854491539,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.0.0-20220722155255-886fb9371eb4","direct":false,"kind":"runtime","optional":false},{"id":13854491540,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491541,"package_name":"golang.org/x/sync","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854491542,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20180823144017-11551d06cbcc","direct":false,"kind":"runtime","optional":false},{"id":13854491543,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20180830151530-49385e6e1522","direct":false,"kind":"runtime","optional":false},{"id":13854491544,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20180905080454-ebe1bf3edb33","direct":false,"kind":"runtime","optional":false},{"id":13854491545,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20181026203630-95b1ffbd15a5","direct":false,"kind":"runtime","optional":false},{"id":13854491546,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20181116152217-5ac8a444bdc5","direct":false,"kind":"runtime","optional":false},{"id":13854491547,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190215142949-d0b11bdaac8a","direct":false,"kind":"runtime","optional":false},{"id":13854491548,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190222072716-a9d3bda3a223","direct":false,"kind":"runtime","optional":false},{"id":13854491549,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190312061237-fead79001313","direct":false,"kind":"runtime","optional":false},{"id":13854491550,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190412213103-97732733099d","direct":false,"kind":"runtime","optional":false},{"id":13854491551,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190422165155-953cdadca894","direct":false,"kind":"runtime","optional":false},{"id":13854491552,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190502145724-3ef323f4f1fd","direct":false,"kind":"runtime","optional":false},{"id":13854491553,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190507160741-ecd444e8653b","direct":false,"kind":"runtime","optional":false},{"id":13854491554,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190606165138-5da285871e9c","direct":false,"kind":"runtime","optional":false},{"id":13854491555,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190606203320-7fc4e5ec1444","direct":false,"kind":"runtime","optional":false},{"id":13854491556,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190624142023-c5567b49c5d0","direct":false,"kind":"runtime","optional":false},{"id":13854491557,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190726091711-fc99dfbffb4e","direct":false,"kind":"runtime","optional":false},{"id":13854491558,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190922100055-0a153f010e69","direct":false,"kind":"runtime","optional":false},{"id":13854491559,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20190924154521-2837fb4f24fe","direct":false,"kind":"runtime","optional":false},{"id":13854491560,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20191001151750-bb3f8db39f24","direct":false,"kind":"runtime","optional":false},{"id":13854491561,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20191008105621-543471e840be","direct":false,"kind":"runtime","optional":false},{"id":13854491562,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20191026070338-33540a1f6037","direct":false,"kind":"runtime","optional":false},{"id":13854491563,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20191115151921-52ab43148777","direct":false,"kind":"runtime","optional":false},{"id":13854491564,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20191204072324-ce4227a45e2e","direct":false,"kind":"runtime","optional":false},{"id":13854491565,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20191228213918-04cbcbbfeed8","direct":false,"kind":"runtime","optional":false},{"id":13854491566,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200113162924-86b910548bc1","direct":false,"kind":"runtime","optional":false},{"id":13854491567,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200116001909-b77594299b42","direct":false,"kind":"runtime","optional":false},{"id":13854491568,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200122134326-e047566fdf82","direct":false,"kind":"runtime","optional":false},{"id":13854491569,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200124204421-9fbb57f87de9","direct":false,"kind":"runtime","optional":false},{"id":13854491570,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200202164722-d101bd2416d5","direct":false,"kind":"runtime","optional":false},{"id":13854491571,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200212091648-12a6c2dcc1e4","direct":false,"kind":"runtime","optional":false},{"id":13854491572,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200223170610-d5e6a3e2c0ae","direct":false,"kind":"runtime","optional":false},{"id":13854491573,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200302150141-5c8b2ff67527","direct":false,"kind":"runtime","optional":false},{"id":13854491574,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200323222414-85ca7c5b95cd","direct":false,"kind":"runtime","optional":false},{"id":13854491575,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200331124033-c3d80250170d","direct":false,"kind":"runtime","optional":false},{"id":13854491576,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200501052902-10377860bb8e","direct":false,"kind":"runtime","optional":false},{"id":13854491577,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200511232937-7e40ca221e25","direct":false,"kind":"runtime","optional":false},{"id":13854491578,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200515095857-1151b9dac4a9","direct":false,"kind":"runtime","optional":false},{"id":13854491579,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200523222454-059865788121","direct":false,"kind":"runtime","optional":false},{"id":13854491580,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200803210538-64077c9b5642","direct":false,"kind":"runtime","optional":false},{"id":13854491581,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200905004654-be1d3432aa8f","direct":false,"kind":"runtime","optional":false},{"id":13854491582,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20200930185726-fdedc70b468f","direct":false,"kind":"runtime","optional":false},{"id":13854491583,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20201119102817-f84b799fce68","direct":false,"kind":"runtime","optional":false},{"id":13854491584,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20201201145000-ef89a241ccb3","direct":false,"kind":"runtime","optional":false},{"id":13854491585,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210104204734-6f8348627aad","direct":false,"kind":"runtime","optional":false},{"id":13854491586,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210119212857-b64e53b001e4","direct":false,"kind":"runtime","optional":false},{"id":13854491587,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210124154548-22da62e12c0c","direct":false,"kind":"runtime","optional":false},{"id":13854491588,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210220050731-9a76102bfb43","direct":false,"kind":"runtime","optional":false},{"id":13854491589,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210225134936-a50acf3fe073","direct":false,"kind":"runtime","optional":false},{"id":13854491590,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210303074136-134d130e1a04","direct":false,"kind":"runtime","optional":false},{"id":13854491591,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210305230114-8fe3ee5dd75b","direct":false,"kind":"runtime","optional":false},{"id":13854491592,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210315160823-c6e025ad8005","direct":false,"kind":"runtime","optional":false},{"id":13854491593,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210320140829-1e4c9ba3b0c4","direct":false,"kind":"runtime","optional":false},{"id":13854491594,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210330210617-4fbd30eecc44","direct":false,"kind":"runtime","optional":false},{"id":13854491595,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210403161142-5e06dd20ab57","direct":false,"kind":"runtime","optional":false},{"id":13854491596,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210423082822-04245dca01da","direct":false,"kind":"runtime","optional":false},{"id":13854491597,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210423185535-09eb48e85fd7","direct":false,"kind":"runtime","optional":false},{"id":13854491598,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210510120138-977fb7262007","direct":false,"kind":"runtime","optional":false},{"id":13854491599,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210514084401-e8d321eab015","direct":false,"kind":"runtime","optional":false},{"id":13854491600,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210603125802-9665404d3644","direct":false,"kind":"runtime","optional":false},{"id":13854491601,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210615035016-665e8c7367d1","direct":false,"kind":"runtime","optional":false},{"id":13854491602,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210616094352-59db8d763f22","direct":false,"kind":"runtime","optional":false},{"id":13854491603,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210630005230-0f9fa26af87c","direct":false,"kind":"runtime","optional":false},{"id":13854491604,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210806184541-e5e7981a1069","direct":false,"kind":"runtime","optional":false},{"id":13854491605,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210816183151-1e6c022a8912","direct":false,"kind":"runtime","optional":false},{"id":13854491606,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210823070655-63515b42dcdf","direct":false,"kind":"runtime","optional":false},{"id":13854491607,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210906170528-6f6e22806c34","direct":false,"kind":"runtime","optional":false},{"id":13854491608,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210908233432-aa78b53d3365","direct":false,"kind":"runtime","optional":false},{"id":13854491609,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210927094055-39ccf1dd6fa6","direct":false,"kind":"runtime","optional":false},{"id":13854491610,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20211007075335-d3039528d8ac","direct":false,"kind":"runtime","optional":false},{"id":13854491611,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20211025201205-69cdffdb9359","direct":false,"kind":"runtime","optional":false},{"id":13854491612,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20211116061358-0a5406a5449c","direct":false,"kind":"runtime","optional":false},{"id":13854491613,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20211124211545-fe61309f8881","direct":false,"kind":"runtime","optional":false},{"id":13854491614,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20211205182925-97ca703d548d","direct":false,"kind":"runtime","optional":false},{"id":13854491615,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20211216021012-1d35b9e2eb4e","direct":false,"kind":"runtime","optional":false},{"id":13854491616,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220520151302-bc2c85ada10a","direct":false,"kind":"runtime","optional":false},{"id":13854491617,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220715151400-c0bba94af5f8","direct":false,"kind":"runtime","optional":false},{"id":13854491618,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220722155257-8c9f86f7a55f","direct":false,"kind":"runtime","optional":false},{"id":13854491619,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220811171246-fbc7d0a398ab","direct":false,"kind":"runtime","optional":false},{"id":13854491620,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220906165534-d0df966e6959","direct":false,"kind":"runtime","optional":false},{"id":13854491621,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20220908164124-27713097b956","direct":false,"kind":"runtime","optional":false},{"id":13854491622,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491623,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491624,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854491625,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854491626,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.6.0","direct":false,"kind":"runtime","optional":false},{"id":13854491627,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.12.0","direct":false,"kind":"runtime","optional":false},{"id":13854491628,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.0.0-20201117132131-f5c789dd3221","direct":false,"kind":"runtime","optional":false},{"id":13854491629,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.0.0-20201126162022-7de9c90e9dd1","direct":false,"kind":"runtime","optional":false},{"id":13854491630,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.0.0-20210927222741-03fcf44c2211","direct":false,"kind":"runtime","optional":false},{"id":13854491631,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491632,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854491633,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.6.0","direct":false,"kind":"runtime","optional":false},{"id":13854491634,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.12.0","direct":false,"kind":"runtime","optional":false},{"id":13854491635,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.0.0-20170915032832-14c0d48ead0c","direct":false,"kind":"runtime","optional":false},{"id":13854491636,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854491637,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.1-0.20180807135948-17ff2d5776d2","direct":false,"kind":"runtime","optional":false},{"id":13854491638,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.2","direct":false,"kind":"runtime","optional":false},{"id":13854491639,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.3","direct":false,"kind":"runtime","optional":false},{"id":13854491640,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.4","direct":false,"kind":"runtime","optional":false},{"id":13854491641,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.5","direct":false,"kind":"runtime","optional":false},{"id":13854491642,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.6","direct":false,"kind":"runtime","optional":false},{"id":13854491643,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.7","direct":false,"kind":"runtime","optional":false},{"id":13854491644,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854491645,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854491646,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":13854491647,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.13.0","direct":false,"kind":"runtime","optional":false},{"id":13854491648,"package_name":"golang.org/x/time","ecosystem":"go","requirements":"v0.0.0-20181108054448-85acf8d2951c","direct":false,"kind":"runtime","optional":false},{"id":13854491649,"package_name":"golang.org/x/time","ecosystem":"go","requirements":"v0.0.0-20190308202827-9d24e82272b4","direct":false,"kind":"runtime","optional":false},{"id":13854491650,"package_name":"golang.org/x/time","ecosystem":"go","requirements":"v0.0.0-20191024005414-555d28b269f0","direct":false,"kind":"runtime","optional":false},{"id":13854491651,"package_name":"golang.org/x/time","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491652,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20180917221912-90fa682c2a6e","direct":false,"kind":"runtime","optional":false},{"id":13854491653,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190114222345-bf090417da8b","direct":false,"kind":"runtime","optional":false},{"id":13854491654,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190226205152-f727befe758c","direct":false,"kind":"runtime","optional":false},{"id":13854491655,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190311212946-11955173bddd","direct":false,"kind":"runtime","optional":false},{"id":13854491656,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190312151545-0bb0c0a6e846","direct":false,"kind":"runtime","optional":false},{"id":13854491657,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190312170243-e65039ee4138","direct":false,"kind":"runtime","optional":false},{"id":13854491658,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190425150028-36563e24a262","direct":false,"kind":"runtime","optional":false},{"id":13854491659,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190506145303-2d16b83fe98c","direct":false,"kind":"runtime","optional":false},{"id":13854491660,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190524140312-2c0ae7006135","direct":false,"kind":"runtime","optional":false},{"id":13854491661,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190606124116-d0a3d012864b","direct":false,"kind":"runtime","optional":false},{"id":13854491662,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190621195816-6e04913cbbac","direct":false,"kind":"runtime","optional":false},{"id":13854491663,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190628153133-6cdbf07be9d0","direct":false,"kind":"runtime","optional":false},{"id":13854491664,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190816200558-6889da9d5479","direct":false,"kind":"runtime","optional":false},{"id":13854491665,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190907020128-2ca718005c18","direct":false,"kind":"runtime","optional":false},{"id":13854491666,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20190911174233-4f2ddba30aff","direct":false,"kind":"runtime","optional":false},{"id":13854491667,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20191012152004-8de300cfc20a","direct":false,"kind":"runtime","optional":false},{"id":13854491668,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20191108193012-7d206e10da11","direct":false,"kind":"runtime","optional":false},{"id":13854491669,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20191113191852-77e3bb0ad9e7","direct":false,"kind":"runtime","optional":false},{"id":13854491670,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20191115202509-3a792d9c32b2","direct":false,"kind":"runtime","optional":false},{"id":13854491671,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20191119224855-298f0cb1881e","direct":false,"kind":"runtime","optional":false},{"id":13854491672,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20191125144606-a911d9008d1f","direct":false,"kind":"runtime","optional":false},{"id":13854491673,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20191130070609-6e064ea0cf2d","direct":false,"kind":"runtime","optional":false},{"id":13854491674,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20191216173652-a0e659d51361","direct":false,"kind":"runtime","optional":false},{"id":13854491675,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20191227053925-7b8e75db28f4","direct":false,"kind":"runtime","optional":false},{"id":13854491676,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200117161641-43d50277825c","direct":false,"kind":"runtime","optional":false},{"id":13854491677,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200122220014-bf1340f18c4a","direct":false,"kind":"runtime","optional":false},{"id":13854491678,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200130002326-2f3ba24bd6e7","direct":false,"kind":"runtime","optional":false},{"id":13854491679,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200204074204-1cc6d1ef6c74","direct":false,"kind":"runtime","optional":false},{"id":13854491680,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200207183749-b753a1ba74fa","direct":false,"kind":"runtime","optional":false},{"id":13854491681,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200212150539-ea181f53ac56","direct":false,"kind":"runtime","optional":false},{"id":13854491682,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200224181240-023911ca70b2","direct":false,"kind":"runtime","optional":false},{"id":13854491683,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200227222343-706bc42d1f0d","direct":false,"kind":"runtime","optional":false},{"id":13854491684,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200304193943-95d2e580d8eb","direct":false,"kind":"runtime","optional":false},{"id":13854491685,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200312045724-11d5b4c81c7d","direct":false,"kind":"runtime","optional":false},{"id":13854491686,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200331025713-a30bf2db82d4","direct":false,"kind":"runtime","optional":false},{"id":13854491687,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200501065659-ab2804fb9c9d","direct":false,"kind":"runtime","optional":false},{"id":13854491688,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200512131952-2bc93b1c0c88","direct":false,"kind":"runtime","optional":false},{"id":13854491689,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200515010526-7d3b6ebf133d","direct":false,"kind":"runtime","optional":false},{"id":13854491690,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200618134242-20370b0cb4b2","direct":false,"kind":"runtime","optional":false},{"id":13854491691,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200619180055-7c47624df98f","direct":false,"kind":"runtime","optional":false},{"id":13854491692,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200729194436-6467de6f59a7","direct":false,"kind":"runtime","optional":false},{"id":13854491693,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200804011535-6c149bb5ef0d","direct":false,"kind":"runtime","optional":false},{"id":13854491694,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200825202427-b303f430e36d","direct":false,"kind":"runtime","optional":false},{"id":13854491695,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20200904185747-39188db58858","direct":false,"kind":"runtime","optional":false},{"id":13854491696,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20201110124207-079ba7bd75cd","direct":false,"kind":"runtime","optional":false},{"id":13854491697,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20201201161351-ac6f37ff4c2a","direct":false,"kind":"runtime","optional":false},{"id":13854491698,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20201208233053-a543418bbed2","direct":false,"kind":"runtime","optional":false},{"id":13854491699,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20210105154028-b0ab187a4818","direct":false,"kind":"runtime","optional":false},{"id":13854491700,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20210106214847-113979e3529a","direct":false,"kind":"runtime","optional":false},{"id":13854491701,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20210108195828-e2f9c7f1fc8e","direct":false,"kind":"runtime","optional":false},{"id":13854491702,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491703,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854491704,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.1.2","direct":false,"kind":"runtime","optional":false},{"id":13854491705,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.1.3","direct":false,"kind":"runtime","optional":false},{"id":13854491706,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.1.4","direct":false,"kind":"runtime","optional":false},{"id":13854491707,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.1.5","direct":false,"kind":"runtime","optional":false},{"id":13854491708,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.1.12","direct":false,"kind":"runtime","optional":false},{"id":13854491709,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.6.0","direct":false,"kind":"runtime","optional":false},{"id":13854491710,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.13.0","direct":false,"kind":"runtime","optional":false},{"id":13854491711,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20190717185122-a985d3407aa7","direct":false,"kind":"runtime","optional":false},{"id":13854491712,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20191011141410-1b5146add898","direct":false,"kind":"runtime","optional":false},{"id":13854491713,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20191204190536-9bdfabe68543","direct":false,"kind":"runtime","optional":false},{"id":13854491714,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20200804184101-5ec99f83aff1","direct":false,"kind":"runtime","optional":false},{"id":13854491715,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20220907171357-04be3eba64a2","direct":false,"kind":"runtime","optional":false},{"id":13854491716,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854491717,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854491718,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.8.0","direct":false,"kind":"runtime","optional":false},{"id":13854491719,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.9.0","direct":false,"kind":"runtime","optional":false},{"id":13854491720,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.13.0","direct":false,"kind":"runtime","optional":false},{"id":13854491721,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.14.0","direct":false,"kind":"runtime","optional":false},{"id":13854491722,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.15.0","direct":false,"kind":"runtime","optional":false},{"id":13854491723,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.17.0","direct":false,"kind":"runtime","optional":false},{"id":13854491724,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.18.0","direct":false,"kind":"runtime","optional":false},{"id":13854491725,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.19.0","direct":false,"kind":"runtime","optional":false},{"id":13854491726,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.20.0","direct":false,"kind":"runtime","optional":false},{"id":13854491727,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.22.0","direct":false,"kind":"runtime","optional":false},{"id":13854491728,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.24.0","direct":false,"kind":"runtime","optional":false},{"id":13854491729,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.28.0","direct":false,"kind":"runtime","optional":false},{"id":13854491730,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.29.0","direct":false,"kind":"runtime","optional":false},{"id":13854491731,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.30.0","direct":false,"kind":"runtime","optional":false},{"id":13854491732,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.35.0","direct":false,"kind":"runtime","optional":false},{"id":13854491733,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.36.0","direct":false,"kind":"runtime","optional":false},{"id":13854491734,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.40.0","direct":false,"kind":"runtime","optional":false},{"id":13854491735,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.41.0","direct":false,"kind":"runtime","optional":false},{"id":13854491736,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.43.0","direct":false,"kind":"runtime","optional":false},{"id":13854491737,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.47.0","direct":false,"kind":"runtime","optional":false},{"id":13854491738,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.48.0","direct":false,"kind":"runtime","optional":false},{"id":13854491739,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.50.0","direct":false,"kind":"runtime","optional":false},{"id":13854491740,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.51.0","direct":false,"kind":"runtime","optional":false},{"id":13854491741,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.54.0","direct":false,"kind":"runtime","optional":false},{"id":13854491742,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.55.0","direct":false,"kind":"runtime","optional":false},{"id":13854491743,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.56.0","direct":false,"kind":"runtime","optional":false},{"id":13854491744,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.57.0","direct":false,"kind":"runtime","optional":false},{"id":13854491745,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.59.0","direct":false,"kind":"runtime","optional":false},{"id":13854491746,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.61.0","direct":false,"kind":"runtime","optional":false},{"id":13854491747,"package_name":"google.golang.org/api","ecosystem":"go","requirements":"v0.62.0","direct":false,"kind":"runtime","optional":false},{"id":13854491748,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491749,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854491750,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854491751,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.6.1","direct":false,"kind":"runtime","optional":false},{"id":13854491752,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.6.5","direct":false,"kind":"runtime","optional":false},{"id":13854491753,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.6.6","direct":false,"kind":"runtime","optional":false},{"id":13854491754,"package_name":"google.golang.org/appengine","ecosystem":"go","requirements":"v1.6.7","direct":false,"kind":"runtime","optional":false},{"id":13854491755,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20180817151627-c66870c02cf8","direct":false,"kind":"runtime","optional":false},{"id":13854491756,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20190307195333-5fe7a883aa19","direct":false,"kind":"runtime","optional":false},{"id":13854491757,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20190418145605-e7d98fc518a7","direct":false,"kind":"runtime","optional":false},{"id":13854491758,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20190425155659-357c62f0e4bb","direct":false,"kind":"runtime","optional":false},{"id":13854491759,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20190502173448-54afdca5d873","direct":false,"kind":"runtime","optional":false},{"id":13854491760,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20190801165951-fa694d86fc64","direct":false,"kind":"runtime","optional":false},{"id":13854491761,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20190819201941-24fa4b261c55","direct":false,"kind":"runtime","optional":false},{"id":13854491762,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20190911173649-1774047e7e51","direct":false,"kind":"runtime","optional":false},{"id":13854491763,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20191108220845-16a3f7862a1a","direct":false,"kind":"runtime","optional":false},{"id":13854491764,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20191115194625-c23dd37a84c9","direct":false,"kind":"runtime","optional":false},{"id":13854491765,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20191216164720-4f79533eabd1","direct":false,"kind":"runtime","optional":false},{"id":13854491766,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20191230161307-f3c370f40bfb","direct":false,"kind":"runtime","optional":false},{"id":13854491767,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200115191322-ca5a22157cba","direct":false,"kind":"runtime","optional":false},{"id":13854491768,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200122232147-0452cf42e150","direct":false,"kind":"runtime","optional":false},{"id":13854491769,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200204135345-fa8e72b47b90","direct":false,"kind":"runtime","optional":false},{"id":13854491770,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200212174721-66ed5ce911ce","direct":false,"kind":"runtime","optional":false},{"id":13854491771,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200224152610-e50cd9704f63","direct":false,"kind":"runtime","optional":false},{"id":13854491772,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200228133532-8c2c7df3a383","direct":false,"kind":"runtime","optional":false},{"id":13854491773,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200305110556-506484158171","direct":false,"kind":"runtime","optional":false},{"id":13854491774,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200312145019-da6875a35672","direct":false,"kind":"runtime","optional":false},{"id":13854491775,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200331122359-1ee6d9798940","direct":false,"kind":"runtime","optional":false},{"id":13854491776,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200430143042-b979b6f78d84","direct":false,"kind":"runtime","optional":false},{"id":13854491777,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200511104702-f5ebc3bea380","direct":false,"kind":"runtime","optional":false},{"id":13854491778,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200513103714-09dca8ec2884","direct":false,"kind":"runtime","optional":false},{"id":13854491779,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200515170657-fc4c6c6a6587","direct":false,"kind":"runtime","optional":false},{"id":13854491780,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200526211855-cb27e3aa2013","direct":false,"kind":"runtime","optional":false},{"id":13854491781,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200618031413-b414f8b61790","direct":false,"kind":"runtime","optional":false},{"id":13854491782,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200729003335-053ba62fc06f","direct":false,"kind":"runtime","optional":false},{"id":13854491783,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200804131852-c06518451d9c","direct":false,"kind":"runtime","optional":false},{"id":13854491784,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200825200019-8632dd797987","direct":false,"kind":"runtime","optional":false},{"id":13854491785,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20200904004341-0bd0a958aa1d","direct":false,"kind":"runtime","optional":false},{"id":13854491786,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20201109203340-2640f1f9cdfb","direct":false,"kind":"runtime","optional":false},{"id":13854491787,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20201201144952-b05cb90ed32e","direct":false,"kind":"runtime","optional":false},{"id":13854491788,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20201210142538-e3217bee35cc","direct":false,"kind":"runtime","optional":false},{"id":13854491789,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20201214200347-8c77b98c765d","direct":false,"kind":"runtime","optional":false},{"id":13854491790,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210108203827-ffc7fda8c3d7","direct":false,"kind":"runtime","optional":false},{"id":13854491791,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210222152913-aa3ee6e6a81c","direct":false,"kind":"runtime","optional":false},{"id":13854491792,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210226172003-ab064af71705","direct":false,"kind":"runtime","optional":false},{"id":13854491793,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210303154014-9728d6b83eeb","direct":false,"kind":"runtime","optional":false},{"id":13854491794,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210310155132-4ce2db91004e","direct":false,"kind":"runtime","optional":false},{"id":13854491795,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210319143718-93e7006c17a6","direct":false,"kind":"runtime","optional":false},{"id":13854491796,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210402141018-6c239bbf2bb1","direct":false,"kind":"runtime","optional":false},{"id":13854491797,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210513213006-bf773b8c8384","direct":false,"kind":"runtime","optional":false},{"id":13854491798,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210602131652-f16073e35f0c","direct":false,"kind":"runtime","optional":false},{"id":13854491799,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210604141403-392c879c8b08","direct":false,"kind":"runtime","optional":false},{"id":13854491800,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210608205507-b6d2f5bf0d7d","direct":false,"kind":"runtime","optional":false},{"id":13854491801,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210624195500-8bfb893ecb84","direct":false,"kind":"runtime","optional":false},{"id":13854491802,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210713002101-d411969a0d9a","direct":false,"kind":"runtime","optional":false},{"id":13854491803,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210716133855-ce7ef5c701ea","direct":false,"kind":"runtime","optional":false},{"id":13854491804,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210728212813-7823e685a01f","direct":false,"kind":"runtime","optional":false},{"id":13854491805,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210805201207-89edb61ffb67","direct":false,"kind":"runtime","optional":false},{"id":13854491806,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210813162853-db860fec028c","direct":false,"kind":"runtime","optional":false},{"id":13854491807,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210821163610-241b8fcbd6c8","direct":false,"kind":"runtime","optional":false},{"id":13854491808,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210828152312-66f60bf46e71","direct":false,"kind":"runtime","optional":false},{"id":13854491809,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210831024726-fe130286e0e2","direct":false,"kind":"runtime","optional":false},{"id":13854491810,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210903162649-d08c68adba83","direct":false,"kind":"runtime","optional":false},{"id":13854491811,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210909211513-a8c4777a87af","direct":false,"kind":"runtime","optional":false},{"id":13854491812,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20210924002016-3dee208752a0","direct":false,"kind":"runtime","optional":false},{"id":13854491813,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20211008145708-270636b82663","direct":false,"kind":"runtime","optional":false},{"id":13854491814,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20211028162531-8db9c33dc351","direct":false,"kind":"runtime","optional":false},{"id":13854491815,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20211118181313-81c1377c94b1","direct":false,"kind":"runtime","optional":false},{"id":13854491816,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20211129164237-f09f9a12af12","direct":false,"kind":"runtime","optional":false},{"id":13854491817,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20211203200212-54befc351ae9","direct":false,"kind":"runtime","optional":false},{"id":13854491818,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20211206160659-862468c7d6e0","direct":false,"kind":"runtime","optional":false},{"id":13854491819,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20211208223120-3a66f561d7aa","direct":false,"kind":"runtime","optional":false},{"id":13854491820,"package_name":"google.golang.org/genproto","ecosystem":"go","requirements":"v0.0.0-20230410155749-daa745c078e1","direct":false,"kind":"runtime","optional":false},{"id":13854491821,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.19.0","direct":false,"kind":"runtime","optional":false},{"id":13854491822,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.20.1","direct":false,"kind":"runtime","optional":false},{"id":13854491823,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.21.1","direct":false,"kind":"runtime","optional":false},{"id":13854491824,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.23.0","direct":false,"kind":"runtime","optional":false},{"id":13854491825,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.25.1","direct":false,"kind":"runtime","optional":false},{"id":13854491826,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.26.0","direct":false,"kind":"runtime","optional":false},{"id":13854491827,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.27.0","direct":false,"kind":"runtime","optional":false},{"id":13854491828,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.27.1","direct":false,"kind":"runtime","optional":false},{"id":13854491829,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.28.0","direct":false,"kind":"runtime","optional":false},{"id":13854491830,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.29.1","direct":false,"kind":"runtime","optional":false},{"id":13854491831,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.30.0","direct":false,"kind":"runtime","optional":false},{"id":13854491832,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.31.0","direct":false,"kind":"runtime","optional":false},{"id":13854491833,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.31.1","direct":false,"kind":"runtime","optional":false},{"id":13854491834,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.33.1","direct":false,"kind":"runtime","optional":false},{"id":13854491835,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.33.2","direct":false,"kind":"runtime","optional":false},{"id":13854491836,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.34.0","direct":false,"kind":"runtime","optional":false},{"id":13854491837,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.35.0","direct":false,"kind":"runtime","optional":false},{"id":13854491838,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.36.0","direct":false,"kind":"runtime","optional":false},{"id":13854491839,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.36.1","direct":false,"kind":"runtime","optional":false},{"id":13854491840,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.37.0","direct":false,"kind":"runtime","optional":false},{"id":13854491841,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.37.1","direct":false,"kind":"runtime","optional":false},{"id":13854491842,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.38.0","direct":false,"kind":"runtime","optional":false},{"id":13854491843,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.39.0","direct":false,"kind":"runtime","optional":false},{"id":13854491844,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.39.1","direct":false,"kind":"runtime","optional":false},{"id":13854491845,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.40.0","direct":false,"kind":"runtime","optional":false},{"id":13854491846,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.40.1","direct":false,"kind":"runtime","optional":false},{"id":13854491847,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.42.0","direct":false,"kind":"runtime","optional":false},{"id":13854491848,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.55.0","direct":false,"kind":"runtime","optional":false},{"id":13854491849,"package_name":"google.golang.org/grpc/cmd/protoc-gen-go-grpc","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491850,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v0.0.0-20200109180630-ec00e32a8dfd","direct":false,"kind":"runtime","optional":false},{"id":13854491851,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v0.0.0-20200221191635-4d8936d0db64","direct":false,"kind":"runtime","optional":false},{"id":13854491852,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v0.0.0-20200228230310-ab0ca4ff8a60","direct":false,"kind":"runtime","optional":false},{"id":13854491853,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.20.1-0.20200309200217-e05f789c0967","direct":false,"kind":"runtime","optional":false},{"id":13854491854,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.21.0","direct":false,"kind":"runtime","optional":false},{"id":13854491855,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.22.0","direct":false,"kind":"runtime","optional":false},{"id":13854491856,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.23.0","direct":false,"kind":"runtime","optional":false},{"id":13854491857,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.23.1-0.20200526195155-81db48ad09cc","direct":false,"kind":"runtime","optional":false},{"id":13854491858,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.24.0","direct":false,"kind":"runtime","optional":false},{"id":13854491859,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.25.0","direct":false,"kind":"runtime","optional":false},{"id":13854491860,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.26.0-rc.1","direct":false,"kind":"runtime","optional":false},{"id":13854491861,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.26.0","direct":false,"kind":"runtime","optional":false},{"id":13854491862,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.27.1","direct":false,"kind":"runtime","optional":false},{"id":13854491863,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.30.0","direct":false,"kind":"runtime","optional":false},{"id":13854491864,"package_name":"gopkg.in/alecthomas/kingpin.v2","ecosystem":"go","requirements":"v2.2.6","direct":false,"kind":"runtime","optional":false},{"id":13854491865,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v0.0.0-20161208181325-20d25e280405","direct":false,"kind":"runtime","optional":false},{"id":13854491866,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v1.0.0-20180628173108-788fd7840127","direct":false,"kind":"runtime","optional":false},{"id":13854491867,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v1.0.0-20190902080502-41f04d3bba15","direct":false,"kind":"runtime","optional":false},{"id":13854491868,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v1.0.0-20201130134442-10cb98267c6c","direct":false,"kind":"runtime","optional":false},{"id":13854491869,"package_name":"gopkg.in/errgo.v2","ecosystem":"go","requirements":"v2.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491870,"package_name":"gopkg.in/ini.v1","ecosystem":"go","requirements":"v1.66.2","direct":false,"kind":"runtime","optional":false},{"id":13854491871,"package_name":"gopkg.in/ini.v1","ecosystem":"go","requirements":"v1.67.0","direct":false,"kind":"runtime","optional":false},{"id":13854491872,"package_name":"gopkg.in/warnings.v0","ecosystem":"go","requirements":"v0.1.2","direct":false,"kind":"runtime","optional":false},{"id":13854491873,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.2.1","direct":false,"kind":"runtime","optional":false},{"id":13854491874,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.2.2","direct":false,"kind":"runtime","optional":false},{"id":13854491875,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.2.3","direct":false,"kind":"runtime","optional":false},{"id":13854491876,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.2.4","direct":false,"kind":"runtime","optional":false},{"id":13854491877,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.2.5","direct":false,"kind":"runtime","optional":false},{"id":13854491878,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.2.8","direct":false,"kind":"runtime","optional":false},{"id":13854491879,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854491880,"package_name":"gopkg.in/yaml.v2","ecosystem":"go","requirements":"v2.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854491881,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.0-20200313102051-9f266ea9e77c","direct":false,"kind":"runtime","optional":false},{"id":13854491882,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.0-20210107192922-496545a6307b","direct":false,"kind":"runtime","optional":false},{"id":13854491883,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854491884,"package_name":"gotest.tools/v3","ecosystem":"go","requirements":"v3.0.3","direct":false,"kind":"runtime","optional":false},{"id":13854491885,"package_name":"honnef.co/go/tools","ecosystem":"go","requirements":"v0.0.0-20190102054323-c2f93a96b099","direct":false,"kind":"runtime","optional":false},{"id":13854491886,"package_name":"honnef.co/go/tools","ecosystem":"go","requirements":"v0.0.0-20190106161140-3f1c8253044a","direct":false,"kind":"runtime","optional":false},{"id":13854491887,"package_name":"honnef.co/go/tools","ecosystem":"go","requirements":"v0.0.0-20190418001031-e561f6794a2a","direct":false,"kind":"runtime","optional":false},{"id":13854491888,"package_name":"honnef.co/go/tools","ecosystem":"go","requirements":"v0.0.0-20190523083050-ea95bdfd59fc","direct":false,"kind":"runtime","optional":false},{"id":13854491889,"package_name":"honnef.co/go/tools","ecosystem":"go","requirements":"v0.0.1-2019.2.3","direct":false,"kind":"runtime","optional":false},{"id":13854491890,"package_name":"honnef.co/go/tools","ecosystem":"go","requirements":"v0.0.1-2020.1.3","direct":false,"kind":"runtime","optional":false},{"id":13854491891,"package_name":"honnef.co/go/tools","ecosystem":"go","requirements":"v0.0.1-2020.1.4","direct":false,"kind":"runtime","optional":false},{"id":13854491892,"package_name":"lukechampine.com/uint128","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491893,"package_name":"modernc.org/cc/v3","ecosystem":"go","requirements":"v3.40.0","direct":false,"kind":"runtime","optional":false},{"id":13854491894,"package_name":"modernc.org/ccgo/v3","ecosystem":"go","requirements":"v3.16.13","direct":false,"kind":"runtime","optional":false},{"id":13854491895,"package_name":"modernc.org/ccorpus","ecosystem":"go","requirements":"v1.11.6","direct":false,"kind":"runtime","optional":false},{"id":13854491896,"package_name":"modernc.org/httpfs","ecosystem":"go","requirements":"v1.0.6","direct":false,"kind":"runtime","optional":false},{"id":13854491897,"package_name":"modernc.org/libc","ecosystem":"go","requirements":"v1.24.1","direct":false,"kind":"runtime","optional":false},{"id":13854491898,"package_name":"modernc.org/mathutil","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854491899,"package_name":"modernc.org/memory","ecosystem":"go","requirements":"v1.6.0","direct":false,"kind":"runtime","optional":false},{"id":13854491900,"package_name":"modernc.org/opt","ecosystem":"go","requirements":"v0.1.3","direct":false,"kind":"runtime","optional":false},{"id":13854491901,"package_name":"modernc.org/sqlite","ecosystem":"go","requirements":"v1.25.0","direct":false,"kind":"runtime","optional":false},{"id":13854491902,"package_name":"modernc.org/strutil","ecosystem":"go","requirements":"v1.1.3","direct":false,"kind":"runtime","optional":false},{"id":13854491903,"package_name":"modernc.org/tcl","ecosystem":"go","requirements":"v1.15.2","direct":false,"kind":"runtime","optional":false},{"id":13854491904,"package_name":"modernc.org/token","ecosystem":"go","requirements":"v1.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854491905,"package_name":"modernc.org/z","ecosystem":"go","requirements":"v1.7.3","direct":false,"kind":"runtime","optional":false},{"id":13854491906,"package_name":"rsc.io/binaryregexp","ecosystem":"go","requirements":"v0.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854491907,"package_name":"rsc.io/quote/v3","ecosystem":"go","requirements":"v3.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491908,"package_name":"rsc.io/sampler","ecosystem":"go","requirements":"v1.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854491909,"package_name":"sigs.k8s.io/yaml","ecosystem":"go","requirements":"v1.3.0","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"syft/pkg/cataloger/golang/test-fixtures/archs/src/go.mod","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:38.135Z","updated_at":"2023-09-21T17:10:38.135Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/golang/test-fixtures/archs/src/go.mod","dependencies":[]},{"ecosystem":"go","filepath":"syft/pkg/cataloger/golang/test-fixtures/glob-paths/src/go.mod","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:38.179Z","updated_at":"2023-09-21T17:10:38.179Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/golang/test-fixtures/glob-paths/src/go.mod","dependencies":[]},{"ecosystem":"go","filepath":"syft/pkg/cataloger/golang/test-fixtures/go-sum-hashes/go.mod","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:38.225Z","updated_at":"2023-09-21T17:10:38.225Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/golang/test-fixtures/go-sum-hashes/go.mod","dependencies":[{"id":13854491930,"package_name":"github.com/CycloneDX/cyclonedx-go","ecosystem":"go","requirements":"v0.7.0","direct":true,"kind":"runtime","optional":false},{"id":13854491931,"package_name":"github.com/acarl005/stripansi","ecosystem":"go","requirements":"v0.0.0-20180116102854-5a71ef0e047d","direct":true,"kind":"runtime","optional":false},{"id":13854491932,"package_name":"github.com/mgutz/ansi","ecosystem":"go","requirements":"v0.0.0-20200706080929-d51e80ef957d","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"syft/pkg/cataloger/golang/test-fixtures/go-sum-hashes/go.sum","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:10:38.289Z","updated_at":"2023-09-21T17:10:38.289Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/golang/test-fixtures/go-sum-hashes/go.sum","dependencies":[{"id":13854491950,"package_name":"github.com/CycloneDX/cyclonedx-go","ecosystem":"go","requirements":"v0.6.0","direct":false,"kind":"runtime","optional":false},{"id":13854491951,"package_name":"github.com/CycloneDX/cyclonedx-go","ecosystem":"go","requirements":"v0.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854491952,"package_name":"github.com/acarl005/stripansi","ecosystem":"go","requirements":"v0.0.0-20180116102854-5a71ef0e047d","direct":false,"kind":"runtime","optional":false},{"id":13854491953,"package_name":"github.com/bradleyjkemp/cupaloy/v2","ecosystem":"go","requirements":"v2.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854491954,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491955,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854491956,"package_name":"github.com/mgutz/ansi","ecosystem":"go","requirements":"v0.0.0-20170206155736-9520e82c474b","direct":false,"kind":"runtime","optional":false},{"id":13854491957,"package_name":"github.com/mgutz/ansi","ecosystem":"go","requirements":"v0.0.0-20200706080929-d51e80ef957d","direct":false,"kind":"runtime","optional":false},{"id":13854491958,"package_name":"github.com/pmezard/go-difflib","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854491959,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854491960,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854491961,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.6.1","direct":false,"kind":"runtime","optional":false},{"id":13854491962,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.7.1","direct":false,"kind":"runtime","optional":false},{"id":13854491963,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v0.0.0-20161208181325-20d25e280405","direct":false,"kind":"runtime","optional":false},{"id":13854491964,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.0-20200313102051-9f266ea9e77c","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"hex","filepath":"syft/pkg/cataloger/elixir/test-fixtures/glob-paths/src/mix.lock","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:10:39.259Z","updated_at":"2023-09-21T17:10:39.259Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/elixir/test-fixtures/glob-paths/src/mix.lock","dependencies":[]},{"ecosystem":"hex","filepath":"syft/pkg/cataloger/elixir/test-fixtures/mix.lock","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:10:39.319Z","updated_at":"2023-09-21T17:10:39.319Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/elixir/test-fixtures/mix.lock","dependencies":[]},{"ecosystem":"maven","filepath":"syft/pkg/cataloger/java/test-fixtures/glob-paths/src/pom.xml","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:39.692Z","updated_at":"2023-09-21T17:10:39.692Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/java/test-fixtures/glob-paths/src/pom.xml","dependencies":[]},{"ecosystem":"maven","filepath":"syft/pkg/cataloger/java/test-fixtures/gradle/build.gradle","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:39.834Z","updated_at":"2023-09-21T17:10:39.834Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/java/test-fixtures/gradle/build.gradle","dependencies":[{"id":13854492070,"package_name":"joda-time:joda-time","ecosystem":"maven","requirements":"2.2","direct":true,"kind":"implementation","optional":false},{"id":13854492071,"package_name":"junit:junit","ecosystem":"maven","requirements":"4.12","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"syft/pkg/cataloger/java/test-fixtures/java-builds/example-java-app/build.gradle","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:39.884Z","updated_at":"2023-09-21T17:10:39.884Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/java/test-fixtures/java-builds/example-java-app/build.gradle","dependencies":[{"id":13854492086,"package_name":"joda-time:joda-time","ecosystem":"maven","requirements":"2.2","direct":true,"kind":"implementation","optional":false},{"id":13854492087,"package_name":"junit:junit","ecosystem":"maven","requirements":"4.12","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"syft/pkg/cataloger/java/test-fixtures/java-builds/example-java-app/pom.xml","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:39.946Z","updated_at":"2023-09-21T17:10:39.946Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/java/test-fixtures/java-builds/example-java-app/pom.xml","dependencies":[{"id":13854492136,"package_name":"joda-time:joda-time","ecosystem":"maven","requirements":"2.9.2","direct":true,"kind":"runtime","optional":false},{"id":13854492137,"package_name":"junit:junit","ecosystem":"maven","requirements":"4.12","direct":true,"kind":"test","optional":false}]},{"ecosystem":"maven","filepath":"syft/pkg/cataloger/java/test-fixtures/java-builds/example-jenkins-plugin/pom.xml","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:40.015Z","updated_at":"2023-09-21T17:10:40.015Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/java/test-fixtures/java-builds/example-jenkins-plugin/pom.xml","dependencies":[{"id":13854492138,"package_name":"org.jenkins-ci.plugins:structs","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":13854492139,"package_name":"org.jenkins-ci.plugins.workflow:workflow-cps","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false},{"id":13854492140,"package_name":"org.jenkins-ci.plugins.workflow:workflow-job","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false},{"id":13854492141,"package_name":"org.jenkins-ci.plugins.workflow:workflow-basic-steps","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false},{"id":13854492142,"package_name":"org.jenkins-ci.plugins.workflow:workflow-durable-task-step","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false},{"id":13854492143,"package_name":"io.jenkins.tools.bom:bom-2.164.x","ecosystem":"maven","requirements":"3","direct":true,"kind":"import","optional":false}]},{"ecosystem":"maven","filepath":"syft/pkg/cataloger/java/test-fixtures/java-builds/example-sb-app/pom.xml","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:40.081Z","updated_at":"2023-09-21T17:10:40.081Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/java/test-fixtures/java-builds/example-sb-app/pom.xml","dependencies":[{"id":13854492166,"package_name":"org.springframework.boot:spring-boot-starter-web","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":13854492167,"package_name":"org.springframework.boot:spring-boot-starter-actuator","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":13854492168,"package_name":"org.springframework.boot:spring-boot-starter-test","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false}]},{"ecosystem":"npm","filepath":"syft/pkg/cataloger/javascript/test-fixtures/glob-paths/src/package-lock.json","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:10:40.691Z","updated_at":"2023-09-21T17:10:40.691Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/javascript/test-fixtures/glob-paths/src/package-lock.json","dependencies":[]},{"ecosystem":"npm","filepath":"syft/pkg/cataloger/javascript/test-fixtures/glob-paths/src/package.json","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:40.783Z","updated_at":"2023-09-21T17:10:40.783Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/javascript/test-fixtures/glob-paths/src/package.json","dependencies":[]},{"ecosystem":"npm","filepath":"syft/pkg/cataloger/javascript/test-fixtures/glob-paths/src/pnpm-lock.yaml","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:10:40.856Z","updated_at":"2023-09-21T17:10:40.856Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/javascript/test-fixtures/glob-paths/src/pnpm-lock.yaml","dependencies":[]},{"ecosystem":"npm","filepath":"syft/pkg/cataloger/javascript/test-fixtures/glob-paths/src/yarn.lock","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:10:40.935Z","updated_at":"2023-09-21T17:10:40.935Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/javascript/test-fixtures/glob-paths/src/yarn.lock","dependencies":[{"id":13854492254,"package_name":"bogus","ecosystem":"npm","requirements":null,"direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"npm","filepath":"syft/pkg/cataloger/javascript/test-fixtures/pkg-json/package.json","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:41.081Z","updated_at":"2023-09-21T17:10:41.081Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/javascript/test-fixtures/pkg-json/package.json","dependencies":[{"id":13854492264,"package_name":"JSONStream","ecosystem":"npm","requirements":"^1.3.5","direct":true,"kind":"runtime","optional":false},{"id":13854492265,"package_name":"abbrev","ecosystem":"npm","requirements":"~1.1.1","direct":true,"kind":"runtime","optional":false},{"id":13854492266,"package_name":"ansicolors","ecosystem":"npm","requirements":"~0.3.2","direct":true,"kind":"runtime","optional":false},{"id":13854492267,"package_name":"ansistyles","ecosystem":"npm","requirements":"~0.1.3","direct":true,"kind":"runtime","optional":false},{"id":13854492268,"package_name":"aproba","ecosystem":"npm","requirements":"^2.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854492269,"package_name":"archy","ecosystem":"npm","requirements":"~1.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854492270,"package_name":"bin-links","ecosystem":"npm","requirements":"^1.1.7","direct":true,"kind":"runtime","optional":false},{"id":13854492271,"package_name":"bluebird","ecosystem":"npm","requirements":"^3.5.5","direct":true,"kind":"runtime","optional":false},{"id":13854492272,"package_name":"byte-size","ecosystem":"npm","requirements":"^5.0.1","direct":true,"kind":"runtime","optional":false},{"id":13854492273,"package_name":"cacache","ecosystem":"npm","requirements":"^12.0.3","direct":true,"kind":"runtime","optional":false},{"id":13854492274,"package_name":"call-limit","ecosystem":"npm","requirements":"^1.1.1","direct":true,"kind":"runtime","optional":false},{"id":13854492275,"package_name":"chownr","ecosystem":"npm","requirements":"^1.1.4","direct":true,"kind":"runtime","optional":false},{"id":13854492276,"package_name":"ci-info","ecosystem":"npm","requirements":"^2.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854492277,"package_name":"cli-columns","ecosystem":"npm","requirements":"^3.1.2","direct":true,"kind":"runtime","optional":false},{"id":13854492278,"package_name":"cli-table3","ecosystem":"npm","requirements":"^0.5.1","direct":true,"kind":"runtime","optional":false},{"id":13854492279,"package_name":"cmd-shim","ecosystem":"npm","requirements":"^3.0.3","direct":true,"kind":"runtime","optional":false},{"id":13854492280,"package_name":"columnify","ecosystem":"npm","requirements":"~1.5.4","direct":true,"kind":"runtime","optional":false},{"id":13854492281,"package_name":"config-chain","ecosystem":"npm","requirements":"^1.1.12","direct":true,"kind":"runtime","optional":false},{"id":13854492282,"package_name":"detect-indent","ecosystem":"npm","requirements":"~5.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854492283,"package_name":"detect-newline","ecosystem":"npm","requirements":"^2.1.0","direct":true,"kind":"runtime","optional":false},{"id":13854492284,"package_name":"dezalgo","ecosystem":"npm","requirements":"~1.0.3","direct":true,"kind":"runtime","optional":false},{"id":13854492285,"package_name":"editor","ecosystem":"npm","requirements":"~1.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854492286,"package_name":"figgy-pudding","ecosystem":"npm","requirements":"^3.5.1","direct":true,"kind":"runtime","optional":false},{"id":13854492287,"package_name":"find-npm-prefix","ecosystem":"npm","requirements":"^1.0.2","direct":true,"kind":"runtime","optional":false},{"id":13854492288,"package_name":"fs-vacuum","ecosystem":"npm","requirements":"~1.2.10","direct":true,"kind":"runtime","optional":false},{"id":13854492289,"package_name":"fs-write-stream-atomic","ecosystem":"npm","requirements":"~1.0.10","direct":true,"kind":"runtime","optional":false},{"id":13854492290,"package_name":"gentle-fs","ecosystem":"npm","requirements":"^2.3.0","direct":true,"kind":"runtime","optional":false},{"id":13854492291,"package_name":"glob","ecosystem":"npm","requirements":"^7.1.6","direct":true,"kind":"runtime","optional":false},{"id":13854492292,"package_name":"graceful-fs","ecosystem":"npm","requirements":"^4.2.4","direct":true,"kind":"runtime","optional":false},{"id":13854492293,"package_name":"has-unicode","ecosystem":"npm","requirements":"~2.0.1","direct":true,"kind":"runtime","optional":false},{"id":13854492294,"package_name":"hosted-git-info","ecosystem":"npm","requirements":"^2.8.8","direct":true,"kind":"runtime","optional":false},{"id":13854492295,"package_name":"iferr","ecosystem":"npm","requirements":"^1.0.2","direct":true,"kind":"runtime","optional":false},{"id":13854492296,"package_name":"infer-owner","ecosystem":"npm","requirements":"^1.0.4","direct":true,"kind":"runtime","optional":false},{"id":13854492297,"package_name":"inflight","ecosystem":"npm","requirements":"~1.0.6","direct":true,"kind":"runtime","optional":false},{"id":13854492298,"package_name":"inherits","ecosystem":"npm","requirements":"^2.0.4","direct":true,"kind":"runtime","optional":false},{"id":13854492299,"package_name":"ini","ecosystem":"npm","requirements":"^1.3.5","direct":true,"kind":"runtime","optional":false},{"id":13854492300,"package_name":"init-package-json","ecosystem":"npm","requirements":"^1.10.3","direct":true,"kind":"runtime","optional":false},{"id":13854492301,"package_name":"is-cidr","ecosystem":"npm","requirements":"^3.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854492302,"package_name":"json-parse-better-errors","ecosystem":"npm","requirements":"^1.0.2","direct":true,"kind":"runtime","optional":false},{"id":13854492303,"package_name":"lazy-property","ecosystem":"npm","requirements":"~1.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854492304,"package_name":"libcipm","ecosystem":"npm","requirements":"^4.0.7","direct":true,"kind":"runtime","optional":false},{"id":13854492305,"package_name":"libnpm","ecosystem":"npm","requirements":"^3.0.1","direct":true,"kind":"runtime","optional":false},{"id":13854492306,"package_name":"libnpmaccess","ecosystem":"npm","requirements":"^3.0.2","direct":true,"kind":"runtime","optional":false},{"id":13854492307,"package_name":"libnpmhook","ecosystem":"npm","requirements":"^5.0.3","direct":true,"kind":"runtime","optional":false},{"id":13854492308,"package_name":"libnpmorg","ecosystem":"npm","requirements":"^1.0.1","direct":true,"kind":"runtime","optional":false},{"id":13854492309,"package_name":"libnpmsearch","ecosystem":"npm","requirements":"^2.0.2","direct":true,"kind":"runtime","optional":false},{"id":13854492310,"package_name":"libnpmteam","ecosystem":"npm","requirements":"^1.0.2","direct":true,"kind":"runtime","optional":false},{"id":13854492311,"package_name":"libnpx","ecosystem":"npm","requirements":"^10.2.2","direct":true,"kind":"runtime","optional":false},{"id":13854492312,"package_name":"lock-verify","ecosystem":"npm","requirements":"^2.1.0","direct":true,"kind":"runtime","optional":false},{"id":13854492313,"package_name":"lockfile","ecosystem":"npm","requirements":"^1.0.4","direct":true,"kind":"runtime","optional":false},{"id":13854492314,"package_name":"lodash._baseuniq","ecosystem":"npm","requirements":"~4.6.0","direct":true,"kind":"runtime","optional":false},{"id":13854492315,"package_name":"lodash.clonedeep","ecosystem":"npm","requirements":"~4.5.0","direct":true,"kind":"runtime","optional":false},{"id":13854492316,"package_name":"lodash.union","ecosystem":"npm","requirements":"~4.6.0","direct":true,"kind":"runtime","optional":false},{"id":13854492317,"package_name":"lodash.uniq","ecosystem":"npm","requirements":"~4.5.0","direct":true,"kind":"runtime","optional":false},{"id":13854492318,"package_name":"lodash.without","ecosystem":"npm","requirements":"~4.4.0","direct":true,"kind":"runtime","optional":false},{"id":13854492319,"package_name":"lru-cache","ecosystem":"npm","requirements":"^5.1.1","direct":true,"kind":"runtime","optional":false},{"id":13854492320,"package_name":"meant","ecosystem":"npm","requirements":"~1.0.1","direct":true,"kind":"runtime","optional":false},{"id":13854492321,"package_name":"mississippi","ecosystem":"npm","requirements":"^3.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854492322,"package_name":"mkdirp","ecosystem":"npm","requirements":"^0.5.5","direct":true,"kind":"runtime","optional":false},{"id":13854492323,"package_name":"move-concurrently","ecosystem":"npm","requirements":"^1.0.1","direct":true,"kind":"runtime","optional":false},{"id":13854492324,"package_name":"node-gyp","ecosystem":"npm","requirements":"^5.1.0","direct":true,"kind":"runtime","optional":false},{"id":13854492325,"package_name":"nopt","ecosystem":"npm","requirements":"^4.0.3","direct":true,"kind":"runtime","optional":false},{"id":13854492326,"package_name":"normalize-package-data","ecosystem":"npm","requirements":"^2.5.0","direct":true,"kind":"runtime","optional":false},{"id":13854492327,"package_name":"npm-audit-report","ecosystem":"npm","requirements":"^1.3.2","direct":true,"kind":"runtime","optional":false},{"id":13854492328,"package_name":"npm-cache-filename","ecosystem":"npm","requirements":"~1.0.2","direct":true,"kind":"runtime","optional":false},{"id":13854492329,"package_name":"npm-install-checks","ecosystem":"npm","requirements":"^3.0.2","direct":true,"kind":"runtime","optional":false},{"id":13854492330,"package_name":"npm-lifecycle","ecosystem":"npm","requirements":"^3.1.4","direct":true,"kind":"runtime","optional":false},{"id":13854492331,"package_name":"npm-package-arg","ecosystem":"npm","requirements":"^6.1.1","direct":true,"kind":"runtime","optional":false},{"id":13854492332,"package_name":"npm-packlist","ecosystem":"npm","requirements":"^1.4.8","direct":true,"kind":"runtime","optional":false},{"id":13854492333,"package_name":"npm-pick-manifest","ecosystem":"npm","requirements":"^3.0.2","direct":true,"kind":"runtime","optional":false},{"id":13854492334,"package_name":"npm-profile","ecosystem":"npm","requirements":"^4.0.4","direct":true,"kind":"runtime","optional":false},{"id":13854492335,"package_name":"npm-registry-fetch","ecosystem":"npm","requirements":"^4.0.5","direct":true,"kind":"runtime","optional":false},{"id":13854492336,"package_name":"npm-user-validate","ecosystem":"npm","requirements":"~1.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854492337,"package_name":"npmlog","ecosystem":"npm","requirements":"~4.1.2","direct":true,"kind":"runtime","optional":false},{"id":13854492338,"package_name":"once","ecosystem":"npm","requirements":"~1.4.0","direct":true,"kind":"runtime","optional":false},{"id":13854492339,"package_name":"opener","ecosystem":"npm","requirements":"^1.5.1","direct":true,"kind":"runtime","optional":false},{"id":13854492340,"package_name":"osenv","ecosystem":"npm","requirements":"^0.1.5","direct":true,"kind":"runtime","optional":false},{"id":13854492341,"package_name":"pacote","ecosystem":"npm","requirements":"^9.5.12","direct":true,"kind":"runtime","optional":false},{"id":13854492342,"package_name":"path-is-inside","ecosystem":"npm","requirements":"~1.0.2","direct":true,"kind":"runtime","optional":false},{"id":13854492343,"package_name":"promise-inflight","ecosystem":"npm","requirements":"~1.0.1","direct":true,"kind":"runtime","optional":false},{"id":13854492344,"package_name":"qrcode-terminal","ecosystem":"npm","requirements":"^0.12.0","direct":true,"kind":"runtime","optional":false},{"id":13854492345,"package_name":"query-string","ecosystem":"npm","requirements":"^6.8.2","direct":true,"kind":"runtime","optional":false},{"id":13854492346,"package_name":"qw","ecosystem":"npm","requirements":"~1.0.1","direct":true,"kind":"runtime","optional":false},{"id":13854492347,"package_name":"read","ecosystem":"npm","requirements":"~1.0.7","direct":true,"kind":"runtime","optional":false},{"id":13854492348,"package_name":"read-cmd-shim","ecosystem":"npm","requirements":"^1.0.5","direct":true,"kind":"runtime","optional":false},{"id":13854492349,"package_name":"read-installed","ecosystem":"npm","requirements":"~4.0.3","direct":true,"kind":"runtime","optional":false},{"id":13854492350,"package_name":"read-package-json","ecosystem":"npm","requirements":"^2.1.1","direct":true,"kind":"runtime","optional":false},{"id":13854492351,"package_name":"read-package-tree","ecosystem":"npm","requirements":"^5.3.1","direct":true,"kind":"runtime","optional":false},{"id":13854492352,"package_name":"readable-stream","ecosystem":"npm","requirements":"^3.6.0","direct":true,"kind":"runtime","optional":false},{"id":13854492353,"package_name":"readdir-scoped-modules","ecosystem":"npm","requirements":"^1.1.0","direct":true,"kind":"runtime","optional":false},{"id":13854492354,"package_name":"request","ecosystem":"npm","requirements":"^2.88.0","direct":true,"kind":"runtime","optional":false},{"id":13854492355,"package_name":"retry","ecosystem":"npm","requirements":"^0.12.0","direct":true,"kind":"runtime","optional":false},{"id":13854492356,"package_name":"rimraf","ecosystem":"npm","requirements":"^2.7.1","direct":true,"kind":"runtime","optional":false},{"id":13854492357,"package_name":"safe-buffer","ecosystem":"npm","requirements":"^5.1.2","direct":true,"kind":"runtime","optional":false},{"id":13854492358,"package_name":"semver","ecosystem":"npm","requirements":"^5.7.1","direct":true,"kind":"runtime","optional":false},{"id":13854492359,"package_name":"sha","ecosystem":"npm","requirements":"^3.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854492360,"package_name":"slide","ecosystem":"npm","requirements":"~1.1.6","direct":true,"kind":"runtime","optional":false},{"id":13854492361,"package_name":"sorted-object","ecosystem":"npm","requirements":"~2.0.1","direct":true,"kind":"runtime","optional":false},{"id":13854492362,"package_name":"sorted-union-stream","ecosystem":"npm","requirements":"~2.1.3","direct":true,"kind":"runtime","optional":false},{"id":13854492363,"package_name":"ssri","ecosystem":"npm","requirements":"^6.0.1","direct":true,"kind":"runtime","optional":false},{"id":13854492364,"package_name":"stringify-package","ecosystem":"npm","requirements":"^1.0.1","direct":true,"kind":"runtime","optional":false},{"id":13854492365,"package_name":"tar","ecosystem":"npm","requirements":"^4.4.13","direct":true,"kind":"runtime","optional":false},{"id":13854492366,"package_name":"text-table","ecosystem":"npm","requirements":"~0.2.0","direct":true,"kind":"runtime","optional":false},{"id":13854492367,"package_name":"tiny-relative-date","ecosystem":"npm","requirements":"^1.3.0","direct":true,"kind":"runtime","optional":false},{"id":13854492368,"package_name":"uid-number","ecosystem":"npm","requirements":"0.0.6","direct":true,"kind":"runtime","optional":false},{"id":13854492369,"package_name":"umask","ecosystem":"npm","requirements":"~1.1.0","direct":true,"kind":"runtime","optional":false},{"id":13854492370,"package_name":"unique-filename","ecosystem":"npm","requirements":"^1.1.1","direct":true,"kind":"runtime","optional":false},{"id":13854492371,"package_name":"unpipe","ecosystem":"npm","requirements":"~1.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854492372,"package_name":"update-notifier","ecosystem":"npm","requirements":"^2.5.0","direct":true,"kind":"runtime","optional":false},{"id":13854492373,"package_name":"uuid","ecosystem":"npm","requirements":"^3.3.3","direct":true,"kind":"runtime","optional":false},{"id":13854492374,"package_name":"validate-npm-package-license","ecosystem":"npm","requirements":"^3.0.4","direct":true,"kind":"runtime","optional":false},{"id":13854492375,"package_name":"validate-npm-package-name","ecosystem":"npm","requirements":"~3.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854492376,"package_name":"which","ecosystem":"npm","requirements":"^1.3.1","direct":true,"kind":"runtime","optional":false},{"id":13854492377,"package_name":"worker-farm","ecosystem":"npm","requirements":"^1.7.0","direct":true,"kind":"runtime","optional":false},{"id":13854492378,"package_name":"write-file-atomic","ecosystem":"npm","requirements":"^2.4.3","direct":true,"kind":"runtime","optional":false},{"id":13854492379,"package_name":"deep-equal","ecosystem":"npm","requirements":"^1.0.1","direct":true,"kind":"development","optional":false},{"id":13854492380,"package_name":"get-stream","ecosystem":"npm","requirements":"^4.1.0","direct":true,"kind":"development","optional":false},{"id":13854492381,"package_name":"licensee","ecosystem":"npm","requirements":"^7.0.3","direct":true,"kind":"development","optional":false},{"id":13854492382,"package_name":"marked","ecosystem":"npm","requirements":"^0.6.3","direct":true,"kind":"development","optional":false},{"id":13854492383,"package_name":"marked-man","ecosystem":"npm","requirements":"^0.6.0","direct":true,"kind":"development","optional":false},{"id":13854492384,"package_name":"npm-registry-couchapp","ecosystem":"npm","requirements":"^2.7.4","direct":true,"kind":"development","optional":false},{"id":13854492385,"package_name":"npm-registry-mock","ecosystem":"npm","requirements":"^1.3.1","direct":true,"kind":"development","optional":false},{"id":13854492386,"package_name":"require-inject","ecosystem":"npm","requirements":"^1.4.4","direct":true,"kind":"development","optional":false},{"id":13854492387,"package_name":"sprintf-js","ecosystem":"npm","requirements":"^1.1.2","direct":true,"kind":"development","optional":false},{"id":13854492388,"package_name":"standard","ecosystem":"npm","requirements":"^11.0.1","direct":true,"kind":"development","optional":false},{"id":13854492389,"package_name":"tacks","ecosystem":"npm","requirements":"^1.3.0","direct":true,"kind":"development","optional":false},{"id":13854492390,"package_name":"tap","ecosystem":"npm","requirements":"^12.7.0","direct":true,"kind":"development","optional":false},{"id":13854492391,"package_name":"tar-stream","ecosystem":"npm","requirements":"^2.1.0","direct":true,"kind":"development","optional":false}]},{"ecosystem":"npm","filepath":"syft/pkg/cataloger/javascript/test-fixtures/pkg-lock/node_modules/@actions/core/package.json","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:41.205Z","updated_at":"2023-09-21T17:10:41.205Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/javascript/test-fixtures/pkg-lock/node_modules/@actions/core/package.json","dependencies":[{"id":13854492405,"package_name":"@actions/http-client","ecosystem":"npm","requirements":"^1.0.11","direct":true,"kind":"runtime","optional":false},{"id":13854492406,"package_name":"@types/node","ecosystem":"npm","requirements":"^12.0.2","direct":true,"kind":"development","optional":false}]},{"ecosystem":"npm","filepath":"syft/pkg/cataloger/javascript/test-fixtures/pkg-lock/node_modules/cowsay/package.json","sha":null,"kind":"manifest","created_at":"2023-09-21T17:10:41.255Z","updated_at":"2023-09-21T17:10:41.255Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/javascript/test-fixtures/pkg-lock/node_modules/cowsay/package.json","dependencies":[{"id":13854493714,"package_name":"get-stdin","ecosystem":"npm","requirements":"^5.0.1","direct":true,"kind":"runtime","optional":false},{"id":13854493715,"package_name":"optimist","ecosystem":"npm","requirements":"~0.6.1","direct":true,"kind":"runtime","optional":false},{"id":13854493716,"package_name":"string-width","ecosystem":"npm","requirements":"~2.1.1","direct":true,"kind":"runtime","optional":false},{"id":13854493717,"package_name":"strip-eof","ecosystem":"npm","requirements":"^1.0.0","direct":true,"kind":"runtime","optional":false},{"id":13854493718,"package_name":"nodeunit","ecosystem":"npm","requirements":"~0.11.1","direct":true,"kind":"development","optional":false},{"id":13854493719,"package_name":"rollup","ecosystem":"npm","requirements":"^0.48.2","direct":true,"kind":"development","optional":false},{"id":13854493720,"package_name":"rollup-plugin-commonjs","ecosystem":"npm","requirements":"^8.2.0","direct":true,"kind":"development","optional":false},{"id":13854493721,"package_name":"rollup-plugin-node-resolve","ecosystem":"npm","requirements":"^3.0.0","direct":true,"kind":"development","optional":false},{"id":13854493722,"package_name":"rollup-plugin-string","ecosystem":"npm","requirements":"^2.0.2","direct":true,"kind":"development","optional":false}]},{"ecosystem":"npm","filepath":"syft/pkg/cataloger/javascript/test-fixtures/pkg-lock/package-lock.json","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:10:48.253Z","updated_at":"2023-09-21T17:10:48.253Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/javascript/test-fixtures/pkg-lock/package-lock.json","dependencies":[{"id":13854493724,"package_name":"@actions/core","ecosystem":"npm","requirements":"1.6.0","direct":false,"kind":"runtime","optional":false},{"id":13854493725,"package_name":"ansi-regex","ecosystem":"npm","requirements":"3.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854493726,"package_name":"cowsay","ecosystem":"npm","requirements":"1.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854493748,"package_name":"get-stdin","ecosystem":"npm","requirements":"5.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854493749,"package_name":"is-fullwidth-code-point","ecosystem":"npm","requirements":"2.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854493750,"package_name":"minimist","ecosystem":"npm","requirements":"0.0.10","direct":false,"kind":"runtime","optional":false},{"id":13854493751,"package_name":"optimist","ecosystem":"npm","requirements":"0.6.1","direct":false,"kind":"runtime","optional":false},{"id":13854493752,"package_name":"string-width","ecosystem":"npm","requirements":"2.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854493753,"package_name":"strip-ansi","ecosystem":"npm","requirements":"4.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854493754,"package_name":"strip-eof","ecosystem":"npm","requirements":"1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854493755,"package_name":"wordwrap","ecosystem":"npm","requirements":"0.0.3","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"npm","filepath":"syft/pkg/cataloger/javascript/test-fixtures/pnpm/pnpm-lock.yaml","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:10:48.459Z","updated_at":"2023-09-21T17:10:48.459Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/javascript/test-fixtures/pnpm/pnpm-lock.yaml","dependencies":[{"id":13854493759,"package_name":"@bcoe","ecosystem":"npm","requirements":"v8-coverage","direct":false,"kind":"development","optional":false}]},{"ecosystem":"npm","filepath":"syft/pkg/cataloger/javascript/test-fixtures/pnpm-v6/pnpm-lock.yaml","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:10:48.507Z","updated_at":"2023-09-21T17:10:48.507Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/javascript/test-fixtures/pnpm-v6/pnpm-lock.yaml","dependencies":[{"id":13854494082,"package_name":"@babel","ecosystem":"npm","requirements":"core@7.21.4","direct":false,"kind":"runtime","optional":false},{"id":13854494083,"package_name":"@testing-library","ecosystem":"npm","requirements":"jest-dom@5.16.5","direct":false,"kind":"runtime","optional":false},{"id":13854494084,"package_name":"@testing-library","ecosystem":"npm","requirements":"react@13.4.0(react-dom@18.2.0)(react@18.2.0)","direct":false,"kind":"runtime","optional":false},{"id":13854494085,"package_name":"@testing-library","ecosystem":"npm","requirements":"user-event@13.5.0(@testing-library","direct":false,"kind":"runtime","optional":false},{"id":13854494086,"package_name":"@types","ecosystem":"npm","requirements":"eslint@8.37.0","direct":false,"kind":"runtime","optional":false},{"id":13854494087,"package_name":"react-dom@18.2.0(react@18.2.0)","ecosystem":"npm","requirements":null,"direct":false,"kind":"runtime","optional":false},{"id":13854494088,"package_name":"react@18.2.0","ecosystem":"npm","requirements":null,"direct":false,"kind":"runtime","optional":false},{"id":13854494089,"package_name":"read-cache@1.0.0","ecosystem":"npm","requirements":null,"direct":false,"kind":"runtime","optional":false},{"id":13854494090,"package_name":"schema-utils@3.1.2","ecosystem":"npm","requirements":null,"direct":false,"kind":"runtime","optional":false},{"id":13854494091,"package_name":"web-vitals@2.1.4","ecosystem":"npm","requirements":null,"direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"npm","filepath":"syft/pkg/cataloger/javascript/test-fixtures/yarn/yarn.lock","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:10:48.557Z","updated_at":"2023-09-21T17:10:48.557Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/javascript/test-fixtures/yarn/yarn.lock","dependencies":[{"id":13854494092,"package_name":"@babel/code-frame","ecosystem":"npm","requirements":"7.10.4","direct":false,"kind":"runtime","optional":false},{"id":13854494093,"package_name":"@types/minimatch","ecosystem":"npm","requirements":"3.0.3","direct":false,"kind":"runtime","optional":false},{"id":13854494094,"package_name":"@types/qs","ecosystem":"npm","requirements":"6.9.4","direct":false,"kind":"runtime","optional":false},{"id":13854494095,"package_name":"ajv","ecosystem":"npm","requirements":"6.12.3","direct":false,"kind":"runtime","optional":false},{"id":13854494096,"package_name":"atob","ecosystem":"npm","requirements":"2.1.2","direct":false,"kind":"runtime","optional":false},{"id":13854494097,"package_name":"aws-sdk","ecosystem":"npm","requirements":"2.706.0","direct":false,"kind":"runtime","optional":false},{"id":13854494098,"package_name":"jhipster-core","ecosystem":"npm","requirements":"7.3.4","direct":false,"kind":"runtime","optional":false},{"id":13854494101,"package_name":"asn1.js","ecosystem":"npm","requirements":"4.10.1","direct":false,"kind":"runtime","optional":false},{"id":13854494102,"package_name":"c0n-fab_u.laTION","ecosystem":"npm","requirements":"7.7.7","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"npm","filepath":"syft/pkg/cataloger/javascript/test-fixtures/yarn-berry/yarn.lock","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:10:48.673Z","updated_at":"2023-09-21T17:10:48.673Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/javascript/test-fixtures/yarn-berry/yarn.lock","dependencies":[{"id":13854494106,"package_name":"@babel/code-frame","ecosystem":"npm","requirements":"7.10.4","direct":false,"kind":"runtime","optional":false},{"id":13854494107,"package_name":"@types/minimatch","ecosystem":"npm","requirements":"3.0.3","direct":false,"kind":"runtime","optional":false},{"id":13854494108,"package_name":"@types/qs","ecosystem":"npm","requirements":"6.9.4","direct":false,"kind":"runtime","optional":false},{"id":13854494109,"package_name":"ajv","ecosystem":"npm","requirements":"6.12.3","direct":false,"kind":"runtime","optional":false},{"id":13854494110,"package_name":"atob","ecosystem":"npm","requirements":"2.1.2","direct":false,"kind":"runtime","optional":false},{"id":13854494111,"package_name":"aws-sdk","ecosystem":"npm","requirements":"2.706.0","direct":false,"kind":"runtime","optional":false},{"id":13854494112,"package_name":"jhipster-core","ecosystem":"npm","requirements":"7.3.4","direct":false,"kind":"runtime","optional":false},{"id":13854494113,"package_name":"asn1.js","ecosystem":"npm","requirements":"4.10.1","direct":false,"kind":"runtime","optional":false},{"id":13854494114,"package_name":"c0n-fab_u.laTION","ecosystem":"npm","requirements":"7.7.7","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"packagist","filepath":"syft/pkg/cataloger/php/test-fixtures/composer.lock","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:11:04.035Z","updated_at":"2023-09-21T17:11:04.035Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/php/test-fixtures/composer.lock","dependencies":[{"id":13854503150,"package_name":"adoy/fastcgi-client","ecosystem":"packagist","requirements":"1.0.2","direct":false,"kind":"runtime","optional":false},{"id":13854503151,"package_name":"alcaeus/mongo-php-adapter","ecosystem":"packagist","requirements":"1.1.11","direct":false,"kind":"runtime","optional":false},{"id":13854503152,"package_name":"behat/gherkin","ecosystem":"packagist","requirements":"v4.6.2","direct":false,"kind":"development","optional":false},{"id":13854503153,"package_name":"codeception/codeception","ecosystem":"packagist","requirements":"4.1.6","direct":false,"kind":"development","optional":false}]},{"ecosystem":"packagist","filepath":"syft/pkg/cataloger/php/test-fixtures/glob-paths/src/composer.lock","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:11:10.380Z","updated_at":"2023-09-21T17:11:10.380Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/php/test-fixtures/glob-paths/src/composer.lock","dependencies":[]},{"ecosystem":"pypi","filepath":"syft/pkg/cataloger/python/test-fixtures/glob-paths/src/1-requirements-dev.txt","sha":null,"kind":"manifest","created_at":"2023-09-21T17:11:11.140Z","updated_at":"2023-09-21T17:11:11.140Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/python/test-fixtures/glob-paths/src/1-requirements-dev.txt","dependencies":[{"id":13854503209,"package_name":"examplearchive","ecosystem":"pypi","requirements":"*","direct":true,"kind":"development","optional":false}]},{"ecosystem":"pypi","filepath":"syft/pkg/cataloger/python/test-fixtures/glob-paths/src/Pipfile.lock","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:11:11.187Z","updated_at":"2023-09-21T17:11:11.187Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/python/test-fixtures/glob-paths/src/Pipfile.lock","dependencies":[]},{"ecosystem":"pypi","filepath":"syft/pkg/cataloger/python/test-fixtures/glob-paths/src/extra-requirements.txt","sha":null,"kind":"manifest","created_at":"2023-09-21T17:11:11.279Z","updated_at":"2023-09-21T17:11:11.279Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/python/test-fixtures/glob-paths/src/extra-requirements.txt","dependencies":[{"id":13854503237,"package_name":"examplearchive","ecosystem":"pypi","requirements":"*","direct":true,"kind":"test","optional":false}]},{"ecosystem":"pypi","filepath":"syft/pkg/cataloger/python/test-fixtures/glob-paths/src/poetry.lock","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:11:11.392Z","updated_at":"2023-09-21T17:11:11.392Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/python/test-fixtures/glob-paths/src/poetry.lock","dependencies":[]},{"ecosystem":"pypi","filepath":"syft/pkg/cataloger/python/test-fixtures/glob-paths/src/requirements-dev.txt","sha":null,"kind":"manifest","created_at":"2023-09-21T17:11:11.443Z","updated_at":"2023-09-21T17:11:11.443Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/python/test-fixtures/glob-paths/src/requirements-dev.txt","dependencies":[{"id":13854503245,"package_name":"examplearchive","ecosystem":"pypi","requirements":"*","direct":true,"kind":"development","optional":false}]},{"ecosystem":"pypi","filepath":"syft/pkg/cataloger/python/test-fixtures/glob-paths/src/requirements.txt","sha":null,"kind":"manifest","created_at":"2023-09-21T17:11:11.798Z","updated_at":"2023-09-21T17:11:11.798Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/python/test-fixtures/glob-paths/src/requirements.txt","dependencies":[{"id":13854503469,"package_name":"examplearchive","ecosystem":"pypi","requirements":"*","direct":true,"kind":"test","optional":false}]},{"ecosystem":"pypi","filepath":"syft/pkg/cataloger/python/test-fixtures/glob-paths/src/setup.py","sha":null,"kind":"manifest","created_at":"2023-09-21T17:11:12.092Z","updated_at":"2023-09-21T17:11:12.092Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/python/test-fixtures/glob-paths/src/setup.py","dependencies":[]},{"ecosystem":"pypi","filepath":"syft/pkg/cataloger/python/test-fixtures/pipfile-lock/Pipfile.lock","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:11:12.127Z","updated_at":"2023-09-21T17:11:12.127Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/python/test-fixtures/pipfile-lock/Pipfile.lock","dependencies":[{"id":13854503477,"package_name":"aio-pika","ecosystem":"pypi","requirements":"==6.8.0","direct":false,"kind":"runtime","optional":false},{"id":13854503478,"package_name":"aiodns","ecosystem":"pypi","requirements":"==2.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854503479,"package_name":"aiohttp","ecosystem":"pypi","requirements":"==3.7.4.post0","direct":false,"kind":"runtime","optional":false},{"id":13854503480,"package_name":"aiohttp-jinja2","ecosystem":"pypi","requirements":"==1.4.2","direct":false,"kind":"runtime","optional":false},{"id":13854503481,"package_name":"astroid","ecosystem":"pypi","requirements":"==2.5.2","direct":false,"kind":"develop","optional":false},{"id":13854503482,"package_name":"autopep8","ecosystem":"pypi","requirements":"==1.5.6","direct":false,"kind":"develop","optional":false}]},{"ecosystem":"pypi","filepath":"syft/pkg/cataloger/python/test-fixtures/requires/requirements.txt","sha":null,"kind":"manifest","created_at":"2023-09-21T17:11:12.322Z","updated_at":"2023-09-21T17:11:12.322Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/python/test-fixtures/requires/requirements.txt","dependencies":[{"id":13854503538,"package_name":"flask","ecosystem":"pypi","requirements":"==4.0.0","direct":true,"kind":"test","optional":false},{"id":13854503539,"package_name":"sqlalchemy","ecosystem":"pypi","requirements":"\u003e=1.0.0,\u003c=2.0.0,","direct":true,"kind":"test","optional":false},{"id":13854503540,"package_name":"foo","ecosystem":"pypi","requirements":"==1.0.0","direct":true,"kind":"test","optional":false},{"id":13854503541,"package_name":"bar","ecosystem":"pypi","requirements":"\u003e=1.0.0,\u003c=2.0.0,","direct":true,"kind":"test","optional":false},{"id":13854503552,"package_name":"SomeProject","ecosystem":"pypi","requirements":"==5.4","direct":true,"kind":"test","optional":false},{"id":13854503565,"package_name":"coverage","ecosystem":"pypi","requirements":"*","direct":true,"kind":"test","optional":false},{"id":13854503566,"package_name":"numpyNew","ecosystem":"pypi","requirements":"*","direct":true,"kind":"test","optional":false},{"id":13854503576,"package_name":"numpy","ecosystem":"pypi","requirements":"\u003e=3.4.1","direct":true,"kind":"test","optional":false},{"id":13854503577,"package_name":"Mopidy-Dirble","ecosystem":"pypi","requirements":"*","direct":true,"kind":"test","optional":false},{"id":13854503635,"package_name":"argh","ecosystem":"pypi","requirements":"==0.26.2","direct":true,"kind":"test","optional":false},{"id":13854503636,"package_name":"argh","ecosystem":"pypi","requirements":"==0.26.3","direct":true,"kind":"test","optional":false},{"id":13854503637,"package_name":"celery","ecosystem":"pypi","requirements":"==4.4.7","direct":true,"kind":"test","optional":false},{"id":13854503638,"package_name":"requests","ecosystem":"pypi","requirements":"==2.8.","direct":true,"kind":"test","optional":false}]},{"ecosystem":"pypi","filepath":"syft/pkg/cataloger/python/test-fixtures/setup/setup.py","sha":null,"kind":"manifest","created_at":"2023-09-21T17:11:12.461Z","updated_at":"2023-09-21T17:11:12.461Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/python/test-fixtures/setup/setup.py","dependencies":[]},{"ecosystem":"rubygems","filepath":"syft/pkg/cataloger/ruby/test-fixtures/Gemfile.lock","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:11:12.801Z","updated_at":"2023-09-21T17:11:12.801Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/ruby/test-fixtures/Gemfile.lock","dependencies":[{"id":13854503753,"package_name":"google-cloud-errors","ecosystem":"rubygems","requirements":"1.3.0","direct":false,"kind":"runtime","optional":false},{"id":13854503754,"package_name":"turbolinks","ecosystem":"rubygems","requirements":"3.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854503755,"package_name":"actionmailer","ecosystem":"rubygems","requirements":"4.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854503756,"package_name":"actionpack","ecosystem":"rubygems","requirements":"4.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854503757,"package_name":"actionview","ecosystem":"rubygems","requirements":"4.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854503758,"package_name":"activemodel","ecosystem":"rubygems","requirements":"4.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854503759,"package_name":"activerecord","ecosystem":"rubygems","requirements":"4.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854503760,"package_name":"activesupport","ecosystem":"rubygems","requirements":"4.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854503761,"package_name":"arel","ecosystem":"rubygems","requirements":"5.0.1.20140414130214","direct":false,"kind":"runtime","optional":false},{"id":13854503762,"package_name":"bootstrap-sass","ecosystem":"rubygems","requirements":"3.1.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854503763,"package_name":"builder","ecosystem":"rubygems","requirements":"3.2.2","direct":false,"kind":"runtime","optional":false},{"id":13854503764,"package_name":"coffee-rails","ecosystem":"rubygems","requirements":"4.0.1","direct":false,"kind":"runtime","optional":false},{"id":13854503765,"package_name":"coffee-script","ecosystem":"rubygems","requirements":"2.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854503766,"package_name":"coffee-script-source","ecosystem":"rubygems","requirements":"1.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854503767,"package_name":"erubis","ecosystem":"rubygems","requirements":"2.7.0","direct":false,"kind":"runtime","optional":false},{"id":13854503768,"package_name":"execjs","ecosystem":"rubygems","requirements":"2.0.2","direct":false,"kind":"runtime","optional":false},{"id":13854503769,"package_name":"hike","ecosystem":"rubygems","requirements":"1.2.3","direct":false,"kind":"runtime","optional":false},{"id":13854503770,"package_name":"i18n","ecosystem":"rubygems","requirements":"0.6.9","direct":false,"kind":"runtime","optional":false},{"id":13854503771,"package_name":"jbuilder","ecosystem":"rubygems","requirements":"2.0.7","direct":false,"kind":"runtime","optional":false},{"id":13854503772,"package_name":"jquery-rails","ecosystem":"rubygems","requirements":"3.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854503773,"package_name":"json","ecosystem":"rubygems","requirements":"1.8.1","direct":false,"kind":"runtime","optional":false},{"id":13854503774,"package_name":"kgio","ecosystem":"rubygems","requirements":"2.9.2","direct":false,"kind":"runtime","optional":false},{"id":13854503775,"package_name":"libv8","ecosystem":"rubygems","requirements":"3.16.14.3","direct":false,"kind":"runtime","optional":false},{"id":13854503776,"package_name":"mail","ecosystem":"rubygems","requirements":"2.5.4","direct":false,"kind":"runtime","optional":false},{"id":13854503777,"package_name":"mime-types","ecosystem":"rubygems","requirements":"1.25.1","direct":false,"kind":"runtime","optional":false},{"id":13854503778,"package_name":"minitest","ecosystem":"rubygems","requirements":"5.3.4","direct":false,"kind":"runtime","optional":false},{"id":13854503779,"package_name":"multi_json","ecosystem":"rubygems","requirements":"1.10.1","direct":false,"kind":"runtime","optional":false},{"id":13854503780,"package_name":"mysql2","ecosystem":"rubygems","requirements":"0.3.16","direct":false,"kind":"runtime","optional":false},{"id":13854503781,"package_name":"polyglot","ecosystem":"rubygems","requirements":"0.3.4","direct":false,"kind":"runtime","optional":false},{"id":13854503782,"package_name":"rack","ecosystem":"rubygems","requirements":"1.5.2","direct":false,"kind":"runtime","optional":false},{"id":13854503783,"package_name":"rack-test","ecosystem":"rubygems","requirements":"0.6.2","direct":false,"kind":"runtime","optional":false},{"id":13854503784,"package_name":"rails","ecosystem":"rubygems","requirements":"4.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854503785,"package_name":"railties","ecosystem":"rubygems","requirements":"4.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854503786,"package_name":"raindrops","ecosystem":"rubygems","requirements":"0.13.0","direct":false,"kind":"runtime","optional":false},{"id":13854503787,"package_name":"rake","ecosystem":"rubygems","requirements":"10.3.2","direct":false,"kind":"runtime","optional":false},{"id":13854503788,"package_name":"rdoc","ecosystem":"rubygems","requirements":"4.1.1","direct":false,"kind":"runtime","optional":false},{"id":13854503789,"package_name":"ref","ecosystem":"rubygems","requirements":"1.0.5","direct":false,"kind":"runtime","optional":false},{"id":13854503790,"package_name":"sass","ecosystem":"rubygems","requirements":"3.2.19","direct":false,"kind":"runtime","optional":false},{"id":13854503791,"package_name":"sass-rails","ecosystem":"rubygems","requirements":"4.0.3","direct":false,"kind":"runtime","optional":false},{"id":13854503792,"package_name":"sdoc","ecosystem":"rubygems","requirements":"0.4.0","direct":false,"kind":"runtime","optional":false},{"id":13854503793,"package_name":"spring","ecosystem":"rubygems","requirements":"1.1.3","direct":false,"kind":"runtime","optional":false},{"id":13854503794,"package_name":"sprockets","ecosystem":"rubygems","requirements":"2.11.0","direct":false,"kind":"runtime","optional":false},{"id":13854503795,"package_name":"sprockets-rails","ecosystem":"rubygems","requirements":"2.1.3","direct":false,"kind":"runtime","optional":false},{"id":13854503796,"package_name":"sqlite3","ecosystem":"rubygems","requirements":"1.3.9","direct":false,"kind":"runtime","optional":false},{"id":13854503797,"package_name":"therubyracer","ecosystem":"rubygems","requirements":"0.12.1","direct":false,"kind":"runtime","optional":false},{"id":13854503798,"package_name":"thor","ecosystem":"rubygems","requirements":"0.19.1","direct":false,"kind":"runtime","optional":false},{"id":13854503799,"package_name":"thread_safe","ecosystem":"rubygems","requirements":"0.3.3","direct":false,"kind":"runtime","optional":false},{"id":13854503800,"package_name":"tilt","ecosystem":"rubygems","requirements":"1.4.1","direct":false,"kind":"runtime","optional":false},{"id":13854503801,"package_name":"treetop","ecosystem":"rubygems","requirements":"1.4.15","direct":false,"kind":"runtime","optional":false},{"id":13854503802,"package_name":"tzinfo","ecosystem":"rubygems","requirements":"1.2.0","direct":false,"kind":"runtime","optional":false},{"id":13854503803,"package_name":"uglifier","ecosystem":"rubygems","requirements":"2.5.0","direct":false,"kind":"runtime","optional":false},{"id":13854503804,"package_name":"unicorn","ecosystem":"rubygems","requirements":"4.8.3","direct":false,"kind":"runtime","optional":false},{"id":13854503805,"package_name":"bad-entry","ecosystem":"rubygems","requirements":"5.5.5","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"rubygems","filepath":"syft/pkg/cataloger/ruby/test-fixtures/bundler.gemspec","sha":null,"kind":"manifest","created_at":"2023-09-21T17:11:13.741Z","updated_at":"2023-09-21T17:11:13.741Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/ruby/test-fixtures/bundler.gemspec","dependencies":[]},{"ecosystem":"rubygems","filepath":"syft/pkg/cataloger/ruby/test-fixtures/glob-paths/specifications/pkg/nested.gemspec","sha":null,"kind":"manifest","created_at":"2023-09-21T17:11:13.761Z","updated_at":"2023-09-21T17:11:13.761Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/ruby/test-fixtures/glob-paths/specifications/pkg/nested.gemspec","dependencies":[]},{"ecosystem":"rubygems","filepath":"syft/pkg/cataloger/ruby/test-fixtures/glob-paths/specifications/root.gemspec","sha":null,"kind":"manifest","created_at":"2023-09-21T17:11:13.776Z","updated_at":"2023-09-21T17:11:13.776Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/ruby/test-fixtures/glob-paths/specifications/root.gemspec","dependencies":[]},{"ecosystem":"rubygems","filepath":"syft/pkg/cataloger/ruby/test-fixtures/glob-paths/src/Gemfile.lock","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:11:13.818Z","updated_at":"2023-09-21T17:11:13.818Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/ruby/test-fixtures/glob-paths/src/Gemfile.lock","dependencies":[]},{"ecosystem":"swiftpm","filepath":"syft/pkg/cataloger/swift/test-fixtures/Package.resolved","sha":null,"kind":"lockfile","created_at":"2023-09-21T17:11:14.448Z","updated_at":"2023-09-21T17:11:14.448Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/swift/test-fixtures/Package.resolved","dependencies":[{"id":13854503861,"package_name":"github.com/apple/swift-algorithms","ecosystem":"swiftpm","requirements":"1.0.0","direct":false,"kind":"runtime","optional":false},{"id":13854503862,"package_name":"github.com/apple/swift-async-algorithms","ecosystem":"swiftpm","requirements":"0.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854503863,"package_name":"github.com/apple/swift-atomics","ecosystem":"swiftpm","requirements":"1.1.0","direct":false,"kind":"runtime","optional":false},{"id":13854503864,"package_name":"github.com/apple/swift-collections","ecosystem":"swiftpm","requirements":"1.0.4","direct":false,"kind":"runtime","optional":false},{"id":13854503865,"package_name":"github.com/apple/swift-numerics","ecosystem":"swiftpm","requirements":"1.0.2","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/detect-schema-changes.yaml","sha":null,"kind":"manifest","created_at":"2023-12-13T20:27:33.507Z","updated_at":"2023-12-13T20:27:33.507Z","repository_link":"https://github.com/anchore/syft/blob/main/.github/workflows/detect-schema-changes.yaml","dependencies":[{"id":15074256928,"package_name":"actions/checkout","ecosystem":"actions","requirements":"b4ffde65f46336ab88eb53be808477a3936bae11","direct":true,"kind":"composite","optional":false},{"id":15074256929,"package_name":"marocchino/sticky-pull-request-comment","ecosystem":"actions","requirements":"efaaab3fd41a9c3de579aba759d2552635e590fd","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"docker","filepath":"syft/format/internal/testutil/test-fixtures/image-simple/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-12-13T20:27:38.462Z","updated_at":"2023-12-13T20:27:38.462Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/format/internal/testutil/test-fixtures/image-simple/Dockerfile","dependencies":[{"id":15074261256,"package_name":"scratch","ecosystem":"docker","requirements":"latest","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"syft/format/syftjson/test-fixtures/image-alpine/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-12-13T20:27:38.799Z","updated_at":"2023-12-13T20:27:38.799Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/format/syftjson/test-fixtures/image-alpine/Dockerfile","dependencies":[{"id":15074261294,"package_name":"alpine","ecosystem":"docker","requirements":"3.18.4@sha256","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"syft/pkg/cataloger/debian/test-fixtures/image-distroless-deb/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-12-13T20:27:39.196Z","updated_at":"2023-12-13T20:27:39.196Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/debian/test-fixtures/image-distroless-deb/Dockerfile","dependencies":[{"id":15074261319,"package_name":"scratch","ecosystem":"docker","requirements":"latest","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"syft/pkg/cataloger/debian/test-fixtures/image-dpkg/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-12-13T20:27:39.885Z","updated_at":"2023-12-13T20:27:39.885Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/debian/test-fixtures/image-dpkg/Dockerfile","dependencies":[{"id":15074261341,"package_name":"scratch","ecosystem":"docker","requirements":"latest","direct":true,"kind":"build","optional":false}]},{"ecosystem":"maven","filepath":"syft/pkg/cataloger/java/test-fixtures/jar-metadata/api-all-2.0.0-sources/META-INF/maven/org.apache.directory.api/api-all/pom.xml","sha":null,"kind":"manifest","created_at":"2023-12-13T20:27:46.193Z","updated_at":"2023-12-13T20:27:46.193Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/java/test-fixtures/jar-metadata/api-all-2.0.0-sources/META-INF/maven/org.apache.directory.api/api-all/pom.xml","dependencies":[{"id":15074268719,"package_name":"${project.groupId}:api-asn1-api","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074269037,"package_name":"${project.groupId}:api-asn1-ber","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074269038,"package_name":"${project.groupId}:api-dsml-engine","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074269048,"package_name":"${project.groupId}:api-dsml-parser","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074269049,"package_name":"${project.groupId}:api-i18n","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074269050,"package_name":"${project.groupId}:api-ldap-client-api","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074269051,"package_name":"${project.groupId}:api-ldap-codec-core","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074269052,"package_name":"${project.groupId}:api-ldap-codec-standalone","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074269053,"package_name":"${project.groupId}:api-ldap-extras-aci","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074269054,"package_name":"${project.groupId}:api-ldap-extras-codec","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074269055,"package_name":"${project.groupId}:api-ldap-extras-codec-api","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074269056,"package_name":"${project.groupId}:api-ldap-extras-sp","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074269057,"package_name":"${project.groupId}:api-ldap-extras-trigger","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074269058,"package_name":"${project.groupId}:api-ldap-extras-util","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074269059,"package_name":"${project.groupId}:api-ldap-model","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074269060,"package_name":"${project.groupId}:api-ldap-net-mina","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074269061,"package_name":"${project.groupId}:api-ldap-schema-converter","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074269062,"package_name":"${project.groupId}:api-ldap-schema-data","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074269063,"package_name":"${project.groupId}:api-util","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"syft/pkg/cataloger/java/test-fixtures/jar-metadata/api-all-2.0.0-sources/META-INF/maven/org.apache.directory.api/api-asn1-api/pom.xml","sha":null,"kind":"manifest","created_at":"2023-12-13T20:27:48.601Z","updated_at":"2023-12-13T20:27:48.601Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/java/test-fixtures/jar-metadata/api-all-2.0.0-sources/META-INF/maven/org.apache.directory.api/api-asn1-api/pom.xml","dependencies":[{"id":15074270371,"package_name":"org.junit.jupiter:junit-jupiter-engine","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false},{"id":15074270372,"package_name":"log4j:log4j","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false},{"id":15074270373,"package_name":"org.slf4j:slf4j-log4j12","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false},{"id":15074270374,"package_name":"org.slf4j:slf4j-api","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false},{"id":15074270375,"package_name":"${project.groupId}:api-i18n","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"syft/pkg/cataloger/java/test-fixtures/jar-metadata/com.fasterxml.jackson.core.jackson-core-2.15.2/META-INF/maven/com.fasterxml.jackson.core/jackson-core/pom.xml","sha":null,"kind":"manifest","created_at":"2023-12-13T20:27:49.700Z","updated_at":"2023-12-13T20:27:49.700Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/java/test-fixtures/jar-metadata/com.fasterxml.jackson.core.jackson-core-2.15.2/META-INF/maven/com.fasterxml.jackson.core/jackson-core/pom.xml","dependencies":[{"id":15074270383,"package_name":"ch.randelshofer:fastdoubleparser","ecosystem":"maven","requirements":"0.9.0","direct":true,"kind":"runtime","optional":false},{"id":15074270414,"package_name":"org.junit.vintage:junit-vintage-engine","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false},{"id":15074270415,"package_name":"org.junit.jupiter:junit-jupiter","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false}]},{"ecosystem":"maven","filepath":"syft/pkg/cataloger/java/test-fixtures/jar-metadata/jackson-core-2.15.2/META-INF/maven/com.fasterxml.jackson.core/jackson-core/pom.xml","sha":null,"kind":"manifest","created_at":"2023-12-13T20:27:50.474Z","updated_at":"2023-12-13T20:27:50.474Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/java/test-fixtures/jar-metadata/jackson-core-2.15.2/META-INF/maven/com.fasterxml.jackson.core/jackson-core/pom.xml","dependencies":[{"id":15074270448,"package_name":"ch.randelshofer:fastdoubleparser","ecosystem":"maven","requirements":"0.9.0","direct":true,"kind":"runtime","optional":false},{"id":15074270449,"package_name":"org.junit.vintage:junit-vintage-engine","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false},{"id":15074270450,"package_name":"org.junit.jupiter:junit-jupiter","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false}]},{"ecosystem":"maven","filepath":"syft/pkg/cataloger/java/test-fixtures/jar-metadata/opensaml-core-3.4.6/META-INF/maven/org.opensaml/opensaml-core/pom.xml","sha":null,"kind":"manifest","created_at":"2023-12-13T20:27:51.236Z","updated_at":"2023-12-13T20:27:51.236Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/java/test-fixtures/jar-metadata/opensaml-core-3.4.6/META-INF/maven/org.opensaml/opensaml-core/pom.xml","dependencies":[{"id":15074270457,"package_name":"joda-time:joda-time","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":15074270480,"package_name":"io.dropwizard.metrics:metrics-core","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"npm","filepath":"syft/pkg/cataloger/javascript/test-fixtures/yarn-remote/yarn.lock","sha":null,"kind":"lockfile","created_at":"2023-12-13T20:27:52.384Z","updated_at":"2023-12-13T20:27:52.384Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/javascript/test-fixtures/yarn-remote/yarn.lock","dependencies":[{"id":15074270512,"package_name":"@babel/code-frame","ecosystem":"npm","requirements":"7.10.4","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"syft/pkg/cataloger/java/internal/maven/test-fixtures/local/child-2/pom.xml","sha":null,"kind":"manifest","created_at":"2026-02-09T05:06:00.834Z","updated_at":"2026-02-09T05:06:00.834Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/java/internal/maven/test-fixtures/local/child-2/pom.xml","dependencies":[]},{"ecosystem":"go","filepath":"syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/go.sum","sha":null,"kind":"lockfile","created_at":"2026-02-09T05:05:50.299Z","updated_at":"2026-02-09T05:05:50.299Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/golang/test-fixtures/image-not-a-module/go.sum","dependencies":[{"id":25814205330,"package_name":"github.com/anchore/archiver/v3","ecosystem":"go","requirements":"v3.5.3-0.20241210171143-5b1d8d1c7c51","direct":false,"kind":"runtime","optional":false},{"id":25814205331,"package_name":"github.com/andybalholm/brotli","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":25814205332,"package_name":"github.com/dsnet/compress","ecosystem":"go","requirements":"v0.0.2-0.20210315054119-f66993602bf5","direct":false,"kind":"runtime","optional":false},{"id":25814205333,"package_name":"github.com/dsnet/golib","ecosystem":"go","requirements":"v0.0.0-20171103203638-1ea166775780","direct":false,"kind":"runtime","optional":false},{"id":25814205336,"package_name":"github.com/golang/snappy","ecosystem":"go","requirements":"v0.0.4","direct":false,"kind":"runtime","optional":false},{"id":25814205337,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.5","direct":false,"kind":"runtime","optional":false},{"id":25814205338,"package_name":"github.com/klauspost/compress","ecosystem":"go","requirements":"v1.4.1","direct":false,"kind":"runtime","optional":false},{"id":25814205339,"package_name":"github.com/klauspost/compress","ecosystem":"go","requirements":"v1.17.11","direct":false,"kind":"runtime","optional":false},{"id":25814205340,"package_name":"github.com/klauspost/cpuid","ecosystem":"go","requirements":"v1.2.0","direct":false,"kind":"runtime","optional":false},{"id":25814205367,"package_name":"github.com/klauspost/pgzip","ecosystem":"go","requirements":"v1.2.6","direct":false,"kind":"runtime","optional":false},{"id":25814205368,"package_name":"github.com/nwaples/rardecode","ecosystem":"go","requirements":"v1.1.3","direct":false,"kind":"runtime","optional":false},{"id":25814205369,"package_name":"github.com/pierrec/lz4/v4","ecosystem":"go","requirements":"v4.1.21","direct":false,"kind":"runtime","optional":false},{"id":25814205370,"package_name":"github.com/ulikunitz/xz","ecosystem":"go","requirements":"v0.5.8","direct":false,"kind":"runtime","optional":false},{"id":25814205371,"package_name":"github.com/ulikunitz/xz","ecosystem":"go","requirements":"v0.5.12","direct":false,"kind":"runtime","optional":false},{"id":25814205372,"package_name":"github.com/xi2/xz","ecosystem":"go","requirements":"v0.0.0-20171230120015-48954b6210f8","direct":false,"kind":"runtime","optional":false},{"id":25814205373,"package_name":"github.com/xyproto/randomstring","ecosystem":"go","requirements":"v1.0.5","direct":false,"kind":"runtime","optional":false},{"id":25814205380,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20191204190536-9bdfabe68543","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"luarocks","filepath":"syft/pkg/cataloger/lua/test-fixtures/rockspec/kong-pgmoon-1.16.2-1.rockspec","sha":null,"kind":"manifest","created_at":"2026-02-09T05:05:59.548Z","updated_at":"2026-02-09T05:05:59.548Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/lua/test-fixtures/rockspec/kong-pgmoon-1.16.2-1.rockspec","dependencies":[{"id":25814206177,"package_name":"lpeg","ecosystem":"luarocks","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":25814206178,"package_name":"luasocket","ecosystem":"luarocks","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":25814206179,"package_name":"luasec","ecosystem":"luarocks","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":25814206180,"package_name":"cqueues","ecosystem":"luarocks","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":25814206181,"package_name":"luaossl","ecosystem":"luarocks","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":25814206182,"package_name":"lua-resty-openssl","ecosystem":"luarocks","requirements":"*","direct":true,"kind":"runtime","optional":false},{"id":25814206176,"package_name":"lua","ecosystem":"luarocks","requirements":"\u003e= 5.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"nuget","filepath":"syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-with-runtime-nodepsjson/src/dotnetapp.csproj","sha":null,"kind":"manifest","created_at":"2026-02-09T05:09:17.604Z","updated_at":"2026-02-09T05:09:17.604Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/dotnet/test-fixtures/image-net8-app-with-runtime-nodepsjson/src/dotnetapp.csproj","dependencies":[{"id":25814213510,"package_name":"Newtonsoft.Json","ecosystem":"nuget","requirements":"13.0.3","direct":true,"kind":"runtime","optional":false},{"id":25814213511,"package_name":"Humanizer","ecosystem":"nuget","requirements":"2.14.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pub","filepath":"syft/pkg/cataloger/dart/test-fixtures/corrupt/pubspec.lock","sha":null,"kind":"lockfile","created_at":"2026-02-09T05:09:23.050Z","updated_at":"2026-02-09T05:09:23.050Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/dart/test-fixtures/corrupt/pubspec.lock","dependencies":[]},{"ecosystem":"pypi","filepath":"syft/pkg/cataloger/python/test-fixtures/poetry/multiple-extras/poetry.lock","sha":null,"kind":"lockfile","created_at":"2026-02-09T05:09:38.343Z","updated_at":"2026-02-09T05:09:38.343Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/python/test-fixtures/poetry/multiple-extras/poetry.lock","dependencies":[{"id":25814213768,"package_name":"anyio","ecosystem":"pypi","requirements":"4.3.0","direct":false,"kind":"runtime","optional":false},{"id":25814213769,"package_name":"brotli","ecosystem":"pypi","requirements":"1.1.0","direct":false,"kind":"runtime","optional":false},{"id":25814213770,"package_name":"brotlicffi","ecosystem":"pypi","requirements":"1.1.0.0","direct":false,"kind":"runtime","optional":false},{"id":25814213771,"package_name":"certifi","ecosystem":"pypi","requirements":"2024.2.2","direct":false,"kind":"runtime","optional":false},{"id":25814213772,"package_name":"cffi","ecosystem":"pypi","requirements":"1.16.0","direct":false,"kind":"runtime","optional":false},{"id":25814213773,"package_name":"h11","ecosystem":"pypi","requirements":"0.14.0","direct":false,"kind":"runtime","optional":false},{"id":25814213774,"package_name":"h2","ecosystem":"pypi","requirements":"4.1.0","direct":false,"kind":"runtime","optional":false},{"id":25814213775,"package_name":"hpack","ecosystem":"pypi","requirements":"4.0.0","direct":false,"kind":"runtime","optional":false},{"id":25814213776,"package_name":"httpcore","ecosystem":"pypi","requirements":"1.0.5","direct":false,"kind":"runtime","optional":false},{"id":25814213777,"package_name":"httpx","ecosystem":"pypi","requirements":"0.27.0","direct":false,"kind":"runtime","optional":false},{"id":25814213778,"package_name":"hyperframe","ecosystem":"pypi","requirements":"6.0.1","direct":false,"kind":"runtime","optional":false},{"id":25814213779,"package_name":"idna","ecosystem":"pypi","requirements":"3.7","direct":false,"kind":"runtime","optional":false},{"id":25814213780,"package_name":"pycparser","ecosystem":"pypi","requirements":"2.22","direct":false,"kind":"runtime","optional":false},{"id":25814213781,"package_name":"sniffio","ecosystem":"pypi","requirements":"1.3.1","direct":false,"kind":"runtime","optional":false},{"id":25814213782,"package_name":"socksio","ecosystem":"pypi","requirements":"1.0.0","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"docker","filepath":"cmd/syft/internal/test/integration/test-fixtures/image-photon-all-layers/Dockerfile","sha":null,"kind":"manifest","created_at":"2026-02-09T05:05:34.862Z","updated_at":"2026-02-09T05:05:34.862Z","repository_link":"https://github.com/anchore/syft/blob/main/cmd/syft/internal/test/integration/test-fixtures/image-photon-all-layers/Dockerfile","dependencies":[{"id":25814203720,"package_name":"photon","ecosystem":"docker","requirements":"5.0-20230729@sha256","direct":true,"kind":"build","optional":false},{"id":25814203721,"package_name":"scratch","ecosystem":"docker","requirements":"latest","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"syft/pkg/cataloger/internal/pe/test-fixtures/image-dotnet31-single-file/Dockerfile","sha":null,"kind":"manifest","created_at":"2026-02-09T05:05:39.480Z","updated_at":"2026-02-09T05:05:39.480Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/internal/pe/test-fixtures/image-dotnet31-single-file/Dockerfile","dependencies":[{"id":25814204215,"package_name":"mcr.microsoft.com/dotnet/core/sdk","ecosystem":"docker","requirements":"3.1","direct":true,"kind":"build","optional":false},{"id":25814204216,"package_name":"busybox","ecosystem":"docker","requirements":"latest","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"syft/pkg/cataloger/redhat/test-fixtures/image-minimal/Dockerfile","sha":null,"kind":"manifest","created_at":"2026-02-09T05:05:40.280Z","updated_at":"2026-02-09T05:05:40.280Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/redhat/test-fixtures/image-minimal/Dockerfile","dependencies":[{"id":25814204298,"package_name":"rockylinux","ecosystem":"docker","requirements":"9.3.20231119@sha256","direct":true,"kind":"build","optional":false},{"id":25814204299,"package_name":"scratch","ecosystem":"docker","requirements":"latest","direct":true,"kind":"build","optional":false}]},{"ecosystem":"hex","filepath":"syft/pkg/cataloger/erlang/test-fixtures/glob-paths/src/rebar.lock","sha":null,"kind":"lockfile","created_at":"2026-02-09T05:05:59.255Z","updated_at":"2026-02-09T05:05:59.255Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/erlang/test-fixtures/glob-paths/src/rebar.lock","dependencies":[]},{"ecosystem":"maven","filepath":"syft/pkg/cataloger/java/internal/maven/test-fixtures/local/child-3/pom.xml","sha":null,"kind":"manifest","created_at":"2026-02-09T05:06:00.874Z","updated_at":"2026-02-09T05:06:00.874Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/java/internal/maven/test-fixtures/local/child-3/pom.xml","dependencies":[]},{"ecosystem":"maven","filepath":"syft/pkg/cataloger/java/internal/maven/test-fixtures/local/circular-2/pom.xml","sha":null,"kind":"manifest","created_at":"2026-02-09T05:06:00.955Z","updated_at":"2026-02-09T05:06:00.955Z","repository_link":"https://github.com/anchore/syft/blob/main/syft/pkg/cataloger/java/internal/maven/test-fixtures/local/circular-2/pom.xml","dependencies":[]}],"score":34.08946750570335,"created_at":"2026-08-12T18:43:19.269Z","updated_at":"2026-08-12T18:44:21.828Z","avatar_url":"https://github.com/anchore.png","language":"Go","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/378891","html_url":"https://summary.ecosyste.ms/projects/378891"}