|
9 | 9 |
|
10 | 10 | replace ( |
11 | 11 | // Changes from https://github.com/anchore/grype/pull/2798 for using VEX with SBOM |
12 | | - github.com/anchore/grype => github.com/dsseng/grype v0.96.1-0.20250718094733-2197792a3b26 |
| 12 | + github.com/anchore/grype => github.com/dsseng/grype v0.95.1-0.20250710124245-9b7e8e23d161 |
13 | 13 | // Changes from https://github.com/anchore/syft/pull/3932 for deterministic SBOM |
14 | | - github.com/anchore/syft => github.com/dsseng/syft v1.26.2-0.20250703101014-f39c35d156d9 |
| 14 | + github.com/anchore/syft => github.com/dsseng/syft v1.28.0 |
15 | 15 | // HACK: required by some dependency of syft, no longer available |
16 | | - github.com/garyburd/redigo => github.com/gomodule/redigo v0.0.0-20150301180006-535138d7bcd7 |
| 16 | + github.com/garyburd/redigo => github.com/gomodule/redigo v1.9.3 |
17 | 17 | ) |
18 | 18 |
|
19 | 19 | require ( |
@@ -59,10 +59,10 @@ require ( |
59 | 59 | github.com/anchore/go-struct-converter v0.0.0-20221118182256-c68fdcfa2092 // indirect |
60 | 60 | github.com/anchore/go-sync v0.0.0-20250326131806-4eda43a485b6 // indirect |
61 | 61 | github.com/anchore/go-version v1.2.2-0.20210903204242-51efa5b487c4 // indirect |
62 | | - github.com/anchore/grype v0.0.0-00010101000000-000000000000 // indirect |
| 62 | + github.com/anchore/grype v0.103.0 // indirect |
63 | 63 | github.com/anchore/packageurl-go v0.1.1-0.20250220190351-d62adb6e1115 // indirect |
64 | 64 | github.com/anchore/stereoscope v0.1.6 // indirect |
65 | | - github.com/anchore/syft v1.28.0 // indirect |
| 65 | + github.com/anchore/syft v1.37.0 // indirect |
66 | 66 | github.com/andybalholm/brotli v1.1.2-0.20250424173009-453214e765f3 // indirect |
67 | 67 | github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect |
68 | 68 | github.com/aquasecurity/go-pep440-version v0.0.1 // indirect |
|
0 commit comments