# Created by Anthelion using komac v2.16.0
# yaml-language-server: $schema=https://aka.ms/winget-manifest.defaultLocale.1.12.0.schema.json

PackageIdentifier: Anchore.Syft
PackageVersion: 1.49.0
PackageLocale: en-US
Publisher: Anchore Inc
PublisherUrl: https://anchore.com/
PublisherSupportUrl: https://github.com/anchore/syft/issues
PackageName: Syft
PackageUrl: https://github.com/anchore/syft
License: Apache-2.0
LicenseUrl: https://github.com/anchore/syft/blob/HEAD/LICENSE
ShortDescription: CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Description: Syft is a powerful and easy-to-use open-source tool for generating Software Bill of Materials (SBOMs) for container images and filesystems. It provides detailed visibility into the packages and dependencies in your software, helping you manage vulnerabilities, license compliance, and software supply chain security.
Moniker: syft
Tags:
- containers
- cyclonedx
- docker
- go
- golang
- hacktoberfest
- oci
- sbom
- spdx
- static-analysis
- tool
ReleaseNotes: |-
  Added Features
  - Support for application/vnd.oci.image.index.v1+json manifests in root OCI layout [Issue #1545] [PR #5074 @jasonpaulos]

  Bug Fixes
  - Misinterpretation of Multiple replace Directives in Golang [Issue #2721] [PR #5069 @ychampion]

  Dependencies
  16 dependency changes (16 updated).
  Updated (16 packages)
  - github.com/anchore/go-rpmdb v0.1.0 → v0.2.0
  - github.com/anchore/stereoscope v0.2.2 → v0.3.0
  - github.com/containerd/containerd/v2 v2.3.2 → v2.3.3
  - github.com/docker/cli v29.5.3+incompatible → v29.6.1+incompatible
  - github.com/gkampitakis/go-snaps v0.5.22 → v0.5.23
  - github.com/moby/moby/api v1.54.2 → v1.55.0
  - github.com/moby/moby/client v0.4.1 → v0.5.0
  - github.com/pelletier/go-toml/v2 v2.3.1 → v2.4.3
  - golang.org/x/crypto v0.53.0 → v0.54.0
  - golang.org/x/mod v0.37.0 → v0.38.0
  - golang.org/x/net v0.56.0 → v0.57.0
  - golang.org/x/sync v0.21.0 → v0.22.0
  - golang.org/x/sys v0.46.0 → v0.47.0
  - golang.org/x/term v0.44.0 → v0.45.0
  - golang.org/x/text v0.38.0 → v0.40.0
  - golang.org/x/tools v0.47.0 → v0.48.0
  (Full Changelog)
ReleaseNotesUrl: https://github.com/anchore/syft/releases/tag/v1.49.0
ManifestType: defaultLocale
ManifestVersion: 1.12.0