v0.13.1

Changes in v0.13.1

• File input not being passed properly to Syft invocation (#385) [kzantow]
• Update Syft to v0.60.3 (#386) [anchore-actions-token-generator]

v0.13.0

Changes in v0.13.0

• Allow type "file:..." to enable creation of SBOMs from tar and other package formats (#357) [malt3]
• Update Syft to v0.59.0 (#371) [anchore-actions-token-generator]
• Update dependencies and node version (#372) [kzantow]

v0.12.0

Changes in v0.12.0

• Update dependencies (#317) kzantow
• Update Syft to v0.53.4 (#266) anchore-actions-token-generator
• Expose upload-artifact and upload-release-assets inputs (#277) joshowen
• Document the dependency-snapshot property (#297) kzantow

v0.11.0

Changes in v0.11.0

• Update GitHub Snapshot to use correlator (#259) kzantow

v0.10.0

Changes in v0.10.0

• Update Syft to v0.43.2 (#225)
• Improve SBOM format handling (#235)

v0.9.0

Changes in v0.9.0

• Add syft-version input to download-syft action (#228)

🐛 Bug Fixes

• Don't use JSON.stringify for logging purposes (#236)

v0.8.0

Changes in v0.8.0

• Specify the Syft version to use (#126)
• Add support for GitHub dependency snapshot API (#201)

v0.7.0

Changes in v0.7.0

• Bump Syft to 0.40.1 (#206)

v0.6.0

Changes in v0.6.0

• Bump Syft to 0.33.0 (#163)

v0.5.0

Changes in v0.5.0

• Bump Syft to 0.32.0 (#158)
• Bump multiple NPM dependencies