From 6b93573889addbdc509f2d20377ab2b8bc1bfbf8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 4 Jun 2026 00:15:46 +0000 Subject: [PATCH] build(deps): bump anchore/syft from v1.44.0 to v1.45.0 Bumps anchore/syft from v1.44.0 to v1.45.0. --- updated-dependencies: - dependency-name: anchore/syft dependency-version: v1.45.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index a83bcafd..e975a68e 100644 --- a/Dockerfile +++ b/Dockerfile @@ -62,7 +62,7 @@ RUN go build -ldflags="-s -w" -trimpath -o /out/panvex-control-plane ./cmd/contr # docker manifest inspect anchore/syft: \ # | jq -r '.manifests[0].digest // .config.digest' # and update the tag + @sha256 below together. -FROM anchore/syft:v1.44.0@sha256:86fde6445b483d902fe011dd9f68c4987dd94e07da1e9edc004e3c2422650de6 AS sbom-builder +FROM anchore/syft:v1.45.0@sha256:e9695f12fca6bf93a6e106c8f7001a13d00608b92e8a73930aacc401a8727ac8 AS sbom-builder COPY --from=control-plane-builder /out/panvex-control-plane /panvex-control-plane RUN /syft /panvex-control-plane -o cyclonedx-json=/sbom/control-plane.cdx.json && \ # Defensive assert: a future syft major that changes the -o flag