v0.14.1

Changes in v0.14.1

• chore(deps): update Syft to v0.76.0 (#403) [anchore-actions-token-generator]

v0.13.4

Changes in v0.13.4

• Added support of workflow artifact's retention policy (#398) [ViacheslavKudinov]
• Use the correct SHA for dependency snapshots from pull requests (#401) [juxtin]
• Update Syft to v0.75.0 (#394) [anchore-actions-token-generator]

v0.13.3

Changes in v0.13.3

• Update Syft to v0.68.1 (#391) [anchore-actions-token-generator]

v0.13.2

Changes in v0.13.2

• Update Syft to v0.68.0 (#387) [anchore-actions-token-generator]

v0.13.1

Changes in v0.13.1

• File input not being passed properly to Syft invocation (#385) [kzantow]
• Update Syft to v0.60.3 (#386) [anchore-actions-token-generator]

v0.13.0

Changes in v0.13.0

• Allow type "file:..." to enable creation of SBOMs from tar and other package formats (#357) [malt3]
• Update Syft to v0.59.0 (#371) [anchore-actions-token-generator]
• Update dependencies and node version (#372) [kzantow]

v0.12.0

Changes in v0.12.0

• Update dependencies (#317) kzantow
• Update Syft to v0.53.4 (#266) anchore-actions-token-generator
• Expose upload-artifact and upload-release-assets inputs (#277) joshowen
• Document the dependency-snapshot property (#297) kzantow

v0.11.0

Changes in v0.11.0

• Update GitHub Snapshot to use correlator (#259) kzantow

v0.10.0

Changes in v0.10.0

• Update Syft to v0.43.2 (#225)
• Improve SBOM format handling (#235)

v0.9.0

Changes in v0.9.0

• Add syft-version input to download-syft action (#228)

🐛 Bug Fixes

• Don't use JSON.stringify for logging purposes (#236)