Additional Changes

• bump go version [#201 @spiffcs]
• update to go 1.24.x [#182 @westonsteimel]

(Full Changelog)

Updates

• add license parsing from vendor dirs for Golang with new syft [syft/3552] @dschmidt
• sbom report: missing licenses consumed with new syft [syft/3572] @kzantow

(Full Changelog)

Additional Changes

• update syft/stereoscope for release [#167 @spiffcs]

(Full Changelog)

Additional Changes

• core dependencies: latest syft and stereoscope (syft v1.17.0) [#156 @willmurphyscode]
• Update Syft to 1.16.0 [#147 @dependabot]

(Full Changelog)

Additional Changes

• update syft to v1.14.1 [#137 @willmurphyscode]

(Full Changelog)

Grant v0.2.2

Special thanks to @NyanKiyoshi and @psududemike for the contributions surrounding fixing #101.

Please file an issue or reach out on the issue board tagging @spiffcs if you need support, feature requests, bug fixes, or have ideas for future features and PR.

Bug Fixes

• No way to deny all licenses while allowing specific ones [#101 #123 @NyanKiyoshi]
• Update to support #101 [#124 @psududemike]

Additional Changes

• bump go version for build [#132 @spiffcs]

(Full Changelog)

Additional Changes

• Add SBOM generation and checksums signing to release [#55 @spiffcs]
• Update Syft to v1.8.0

(Full Changelog)

Feature Changes

• add CSV output option [#65 @spiffcs]
• update syft source provider [#58 @kzantow]

(Full Changelog)

Bug Fixes

• default licenses policy [#50 #56 @spiffcs]

Additional Changes

• remove python codeql [#41 @spiffcs]
• create SECURITY.md [#39 @spiffcs]
• dependabot; misc workflow; github actions [#37 @spiffcs]

(Full Changelog)

Additional Changes

• update syft to latest [#36 @spiffcs]
• show non spdx in list report [#35 @spiffcs]
• Enhance list command json output [#34 @spiffcs]
• update check json output with custom details [#33 @spiffcs]
• separate format packages and update list command formats [#32 @spiffcs]

(Full Changelog)