| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: grant | Distribution: openSUSE Tumbleweed |
| Version: 0.7.0 | Vendor: openSUSE |
| Release: 1.1 | Build date: Wed Nov 4 09:46:49 2026 |
| Group: Unspecified | Build host: reproducible |
| Size: 92154190 | Source RPM: grant-0.7.0-1.1.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://github.com/anchore/grant | |
| Summary: Search an SBOM for licenses and the packages they belong to | |
View licenses for container images, SBOM documents, filesystems, and apply rules that help you build a license compliance report.
Apache-2.0
* Wed Nov 04 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.7.0:
* Added Features
- Support SPDX "user defined license reference" (aka
LicenseRef) [Issue #157] [PR #601]
- Windows binary builds of grant / Windows as a supported
platform [Issue #154] [PR #440]
* Bug Fixes
- update mergeDuplicatePackages call sites to new signature [PR
[#628]]
- windows-safe config discovery and OS-independent policy globs
[PR #599]
- use the license classifier directly instead of its tools
backend [PR #598]
- sign release checksums with a sigstore bundle [PR #594]
- distinguish java packages sharing an artifact id [PR #571]
- guard against panic on malformed SPDX license expression [PR
[#548]]
- bug: Grant fails to scan a RHEL9 container containing the
'kernel-headers' package [Issue #122] [PR #601]
- Follow/resolve directory symlinks during license file search
[Issue #401] [PR #554]
- bug: output can span many lines, making it difficult to read
[Issue #276] [PR #556]
* Additional Changes
- Multiple license assigned ( WITH / OR ) operator [Issue #500]
[PR #555]
- Count each package once in grant list [PR #610]
- move images to distroless static-debian13 [PR #618]
- bump go-make module and action together [PR #607]
- add COPYRIGHT and CONTRIBUTORS.md files [PR #606]
- fail the unit test gate when any platform fails [PR #600]
- Preserve quoted paths when running tagged installer scripts
[PR #595]
* Dependencies
176 dependency changes (138 updated, 32 added, 6 removed). 29
vulnerabilities remediated.
- Remediated (29)
- GHSA-259r-337f-4rfw (High) — github.com/klauspost/compress
- GHSA-2v4p-qf9q-27wj (High) — google.golang.org/grpc
- GHSA-4w3g-jfj2-cw2q (Medium) —
github.com/go-jose/go-jose/v4
- GHSA-7jxh-36q5-gcqv (Medium) —
github.com/containerd/containerd/v2
- GHSA-8wmf-6v46-5gfg (Low) — go.opentelemetry.io/otel/sdk
- GHSA-hc8v-wwc9-vgxm (High) — github.com/go-git/go-git/v5
- GHSA-hrxh-6v49-42gf (High) — google.golang.org/grpc
- GHSA-mgcc-cww5-fp2q (High) — github.com/go-jose/go-jose/v4
- GHSA-mjcv-p78q-w5fw (Medium) — github.com/moby/sys/user
- GHSA-p7v4-vr35-mj6f (High) —
github.com/containerd/containerd/v2
- GHSA-pg57-6jwg-q645 (Medium) —
github.com/containerd/containerd/v2
- GHSA-qc2q-p7wx-3px3 (Medium) — google.golang.org/grpc
- GHSA-qgq7-7hm3-q39j (Medium) — github.com/go-git/go-git/v5
- GHSA-rp3h-jf77-q9p4 (Medium) —
github.com/containerd/containerd/v2
- GHSA-vp52-pcj8-j9qc (High) — google.golang.org/grpc
- GHSA-vvm8-gf78-28g4 (Medium) —
github.com/go-jose/go-jose/v4
- GO-2026-5158 (Medium) — go.opentelemetry.io/otel
- GO-2026-5970 (High) — golang.org/x/text
- GO-2026-6179 (High) — golang.org/x/mod
- GO-2026-6180 (High) — golang.org/x/mod
- GO-2026-6303 (High) — golang.org/x/crypto
- GO-2026-6354 (High) — golang.org/x/crypto
- GO-2026-6355 (High) — golang.org/x/crypto
- GO-2026-6603 (High) — golang.org/x/net
- GO-2026-6610 (High) — golang.org/x/net
- GO-2026-6611 (High) — golang.org/x/net
- GO-2026-6612 (Critical) — golang.org/x/net
- GO-2026-6617 (High) — golang.org/x/net
- GO-2026-6629 (High) — golang.org/x/text
- Toolchains (1)
- Go minimum version: 1.26.3 → 1.26.8
- Updated (138 packages)
- cel.dev/expr v0.25.1 → v0.25.2
- cloud.google.com/go/auth v0.18.2 → v0.23.3
- cloud.google.com/go/compute/metadata v0.9.0 → v0.9.1
- cloud.google.com/go/iam v1.5.3 → v1.12.0
- cloud.google.com/go/logging v1.13.1 → v1.19.0
- cloud.google.com/go/longrunning v0.8.0 → v1.2.0
- cloud.google.com/go/monitoring v1.24.3 → v1.30.0
- cloud.google.com/go/storage v1.61.3 → v1.68.0
- cloud.google.com/go/trace v1.11.7 → v1.16.0
- github.com/CycloneDX/cyclonedx-go v0.11.0 → v0.12.0
- github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp
1.31.0 → v1.34.0
- github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric
0.55.0 → v0.57.0
- github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/cloudmock
0.55.0 → v0.57.0
- github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping
0.55.0 → v0.57.0
- github.com/Microsoft/go-winio v0.6.3-0.ad3df93 →
v0.6.3-0.f19d971
- github.com/Microsoft/hcsshim v0.15.0-rc.1 → v0.15.0-rc.4
- github.com/ProtonMail/go-crypto v1.4.1 → v1.5.2
- github.com/anchore/clio v0.1.1 → v0.1.2
- github.com/anchore/go-logger v0.1.1 → v0.2.0
- github.com/anchore/go-rpmdb v0.1.0 → v0.2.2
- github.com/anchore/go-sync v0.1.1 → v0.1.2
- github.com/anchore/stereoscope v0.2.2 → v0.4.0
- github.com/anchore/syft v1.46.0 → v1.56.0
- github.com/aws/aws-sdk-go-v2 v1.41.5 → v1.47.1
- github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
v1.7.8 → v1.7.20
- github.com/aws/aws-sdk-go-v2/config v1.32.12 → v1.33.6
- github.com/aws/aws-sdk-go-v2/credentials v1.19.12 → v1.20.6
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.20 →
v1.20.1
- github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.21
→ v1.5.4
- github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.21
→ v2.8.4
- github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.22 → v1.5.4
- github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding
1.13.7 → v1.13.19
- github.com/aws/aws-sdk-go-v2/service/internal/checksum
1.9.13 → v1.11.5
- github.com/aws/aws-sdk-go-v2/service/internal/presigned-url
1.13.21 → v1.14.4
- github.com/aws/aws-sdk-go-v2/service/internal/s3shared
1.19.21 → v1.20.4
- github.com/aws/aws-sdk-go-v2/service/s3 v1.97.3 → v1.114.0
- github.com/aws/aws-sdk-go-v2/service/signin v1.0.8 →
v1.10.1
- github.com/aws/aws-sdk-go-v2/service/sso v1.30.13 → v1.38.1
- github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.17 →
v1.43.1
- github.com/aws/aws-sdk-go-v2/service/sts v1.41.9 → v1.51.1
- github.com/aws/smithy-go v1.24.2 → v1.28.1
- github.com/bmatcuk/doublestar/v4 v4.10.0 → v4.10.3
- github.com/cncf/xds/go v0.0.0-ee656c7 → v0.0.0-dba9d58
- github.com/containerd/containerd/api v1.11.1 → v1.12.0
- github.com/containerd/containerd/v2 v2.3.2 → v2.4.2
(remediated GHSA-7jxh-36q5-gcqv, GHSA-p7v4-vr35-mj6f,
GHSA-pg57-6jwg-q645, GHSA-rp3h-jf77-q9p4)
- github.com/containerd/log v0.1.0 → v0.2.0
- github.com/containerd/platforms v1.0.0-rc.4 → v1.0.0-rc.5
- github.com/containerd/ttrpc v1.2.8 → v1.2.9
- github.com/containerd/typeurl/v2 v2.2.3 → v2.3.0
- github.com/cyphar/filepath-securejoin v0.6.1 → v0.7.0
- github.com/deitch/magic v0.0.0-1ff89d7 → v1.0.0
- github.com/diskfs/go-diskfs v1.9.3 → v1.9.4
- github.com/docker/cli v29.5.3+incompatible →
v29.9.2+incompatible
- github.com/docker/docker-credential-helpers v0.9.5 →
v0.9.10
- github.com/docker/go-connections v0.7.0 → v0.8.2
- github.com/dustin/go-humanize v1.0.1 → v1.1.0
- github.com/envoyproxy/go-control-plane/envoy v1.36.0 →
v1.37.0
- github.com/envoyproxy/protoc-gen-validate v1.3.0 → v1.3.3
- github.com/erofs/go-erofs v0.3.0 → v0.3.1
- github.com/fatih/color v1.18.0 → v1.19.0
- github.com/felixge/httpsnoop v1.0.4 → v1.1.0
- github.com/fsnotify/fsnotify v1.9.0 → v1.10.1
- github.com/gabriel-vasile/mimetype v1.4.13 → v1.4.16
- github.com/github/go-spdx/v2 v2.7.0 → v2.8.0
- github.com/gkampitakis/go-snaps v0.5.22 → v0.5.24
- github.com/glebarez/go-sqlite v1.20.3 → v1.23.0
- github.com/go-git/go-billy/v5 v5.9.0 → v5.9.2
- github.com/go-git/go-git/v5 v5.19.1 → v5.19.3
(remediated GHSA-hc8v-wwc9-vgxm, GHSA-qgq7-7hm3-q39j)
- github.com/go-jose/go-jose/v4 v4.1.4 → v4.1.6
(remediated GHSA-4w3g-jfj2-cw2q, GHSA-mgcc-cww5-fp2q,
GHSA-vvm8-gf78-28g4)
- github.com/go-logr/logr v1.4.3 → v1.4.4
- github.com/go-test/deep v1.1.1 → v1.1.2
- github.com/google/go-containerregistry v0.21.7 → v0.22.1
- github.com/google/pprof v0.0.0-a4b03ec → v0.0.0-1facf8f
- github.com/google/s2a-go v0.1.9 → v0.1.10
- github.com/googleapis/enterprise-certificate-proxy v0.3.14
→ v0.3.22
- github.com/googleapis/gax-go/v2 v2.17.0 → v2.24.1
- github.com/gookit/color v1.6.1 → v1.6.3
- github.com/gpustack/gguf-parser-go v0.24.1 → v0.27.0
- github.com/hashicorp/aws-sdk-go-base/v2 v2.0.0-beta.72 →
v2.0.0-beta.74
- github.com/hashicorp/go-getter v1.8.6 → v1.8.10
- github.com/hashicorp/go-version v1.8.0 → v1.9.0
- github.com/hashicorp/hcl/v2 v2.24.0 → v2.25.0
- github.com/jedib0t/go-pretty/v6 v6.8.1 → v6.8.3
- github.com/klauspost/compress v1.18.6 → v1.20.3
(remediated GHSA-259r-337f-4rfw)
- github.com/klauspost/pgzip v1.2.6 → v1.2.7
- github.com/magiconair/properties v1.8.10 → v1.18.12
- github.com/mattn/go-isatty v0.0.20 → v0.0.24
- github.com/mattn/go-runewidth v0.0.21 → v0.0.31
- github.com/moby/moby/api v1.54.2 → v1.56.1
- github.com/moby/moby/client v0.4.1 → v0.6.2
- github.com/moby/sys/user v0.4.0 → v0.4.1
(remediated GHSA-mjcv-p78q-w5fw)
- github.com/moby/sys/userns v0.1.0 → v0.2.1
- github.com/ncruces/go-strftime v1.0.0 → v1.1.0
- github.com/nwaples/rardecode/v2 v2.2.0 → v2.4.1
- github.com/olekukonko/tablewriter v1.1.4 → v1.1.5
- github.com/pelletier/go-toml/v2 v2.3.1 → v2.4.3
- github.com/pjbgf/sha1cd v0.6.0 → v0.7.0
- github.com/prometheus/procfs v0.19.2 → v0.21.1
- github.com/sirupsen/logrus v1.9.4 → v1.10.2
- github.com/spiffe/go-spiffe/v2 v2.6.0 → v2.8.1
- github.com/stretchr/objx v0.5.2 → v0.5.3
- github.com/stretchr/testify v1.11.1 → v1.12.1
- github.com/sylabs/sif/v2 v2.24.1 → v2.24.2
- github.com/terminalstatic/go-xsd-validate v0.1.6 → v0.1.8
- github.com/ulikunitz/xz v0.5.15 → v0.5.17
- github.com/zclconf/go-cty v1.16.3 → v1.19.0
- go.opentelemetry.io/contrib/detectors/gcp v1.39.0 → v1.44.0
- go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
0.68.0 → v0.71.0
- go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
0.68.0 → v0.71.0
- go.opentelemetry.io/otel v1.43.0 → v1.46.0
(remediated GO-2026-5158)
- go.opentelemetry.io/otel/exporters/stdout/stdoutmetric
v1.40.0 → v1.44.0
- go.opentelemetry.io/otel/metric v1.43.0 → v1.46.0
- go.opentelemetry.io/otel/sdk v1.43.0 → v1.46.0
(remediated GHSA-8wmf-6v46-5gfg)
- go.opentelemetry.io/otel/sdk/metric v1.43.0 → v1.46.0
- go.opentelemetry.io/otel/trace v1.43.0 → v1.46.0
- go.yaml.in/yaml/v3 v3.0.4 → v3.0.5
- golang.org/x/crypto v0.53.0 → v0.58.0
(remediated GO-2026-6303, GO-2026-6354, GO-2026-6355)
- golang.org/x/mod v0.37.0 → v0.42.0
(remediated GO-2026-6179, GO-2026-6180)
- golang.org/x/net v0.56.0 → v0.61.0
(remediated GO-2026-6603, GO-2026-6610, GO-2026-6611,
GO-2026-6612, GO-2026-6617)
- golang.org/x/oauth2 v0.36.0 → v0.37.0
- golang.org/x/sync v0.21.0 → v0.24.0
- golang.org/x/sys v0.46.0 → v0.49.0
- golang.org/x/term v0.44.0 → v0.47.0
- golang.org/x/text v0.38.0 → v0.43.0
(remediated GO-2026-5970, GO-2026-6629)
- golang.org/x/time v0.15.0 → v0.16.0
- golang.org/x/tools v0.46.0 → v0.52.0
- google.golang.org/api v0.271.0 → v0.299.0
- google.golang.org/genproto v0.0.0-8636f87 → v0.0.0-e75dac1
- google.golang.org/genproto/googleapis/api v0.0.0-9d38bb4 →
v0.0.0-da73d73
- google.golang.org/genproto/googleapis/rpc v0.0.0-6f92a3b →
v0.0.0-b142276
- google.golang.org/grpc v1.80.0 → v1.84.0
(remediated GHSA-2v4p-qf9q-27wj, GHSA-hrxh-6v49-42gf,
GHSA-qc2q-p7wx-3px3, GHSA-vp52-pcj8-j9qc)
- google.golang.org/protobuf v1.36.12-0.f2248ac → v1.36.12
- modernc.org/cc/v4 v4.28.4 → v4.30.3
- modernc.org/ccgo/v4 v4.34.4 → v4.37.0
- modernc.org/gc/v3 v3.1.3 → v3.2.0
- modernc.org/libc v1.73.4 → v1.79.0
- modernc.org/memory v1.11.0 → v1.12.1
- modernc.org/sqlite v1.53.0 → v1.61.0
- Added (32 packages)
- cyphar.com/go-pathrs v0.2.5
- github.com/VividCortex/ewma v1.2.0
- github.com/acarl005/stripansi v0.0.0-5a71ef0
- github.com/apparentlymart/go-textseg/v17 v17.0.1
- github.com/containerd/log/otel v0.1.0
- github.com/containerd/stargz-snapshotter/estargz v0.19.0
- github.com/containers/libtrust v0.0.0-c1716e8
- github.com/containers/ocicrypt v1.3.2
- github.com/cyberphone/json-canonicalization v0.0.0-19d51d7
- github.com/google/go-intervals v0.0.2
- github.com/mattn/go-sqlite3 v1.14.52
- github.com/miekg/pkcs11 v1.1.2
- github.com/mistifyio/go-zfs/v4 v4.0.0
- github.com/moby/sys/capability v0.4.0
- github.com/opencontainers/selinux v1.15.1
- github.com/proglottis/gpgme v0.1.6
- github.com/secure-systems-lab/go-securesystemslib v0.11.1
- github.com/sigstore/fulcio v1.8.8
- github.com/sigstore/protobuf-specs v0.5.2
- github.com/sigstore/sigstore v1.10.11
- github.com/smallstep/pkcs7 v0.2.1
- github.com/stefanberger/go-pkcs11uri v0.0.0-7828495
- github.com/tchap/go-patricia/v2 v2.3.3
- github.com/varlink/go v0.4.1-0.c935be0
- github.com/vbatts/tar-split v0.12.3
- github.com/vbauerster/cupwriter v0.0.5
- github.com/vbauerster/mpb/v8 v8.16.2
- github.com/youmark/pkcs8 v0.0.0-a2c0da2
- go.opentelemetry.io/otel/metric/x v0.68.0
- go.podman.io/image/v5 v5.42.0
- go.podman.io/storage v1.65.0
- howett.net/plist v1.0.1
- Removed (6 packages)
- github.com/aws/aws-sdk-go-v2/internal/ini v1.8.6
- github.com/becheran/wildmatch-go v1.0.0
- github.com/gogo/protobuf v1.3.2
- github.com/klauspost/cpuid/v2 v2.3.0
- github.com/moby/sys/sequential v0.6.0
- go.opencensus.io v0.24.0
* Thu Jul 09 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.6.8:
* bug: non zero exit code when no denied packages reported based
on policies [Issue #454] [PR #517 @arpitjain099]
* chore(deps): bump
anchore/workflows/.github/workflows/check-version-available.yaml
(#532)
* chore(deps): bump
anchore/workflows/.github/workflows/release-install-script.yaml
(#536)
* chore(deps): bump github.com/anchore/go-collections from 0.1.0
to 0.1.1 (#542)
* chore(deps): bump github.com/anchore/syft from 1.45.1 to 1.46.0
(#537)
* chore(deps): bump github.com/anchore/clio from 0.1.0 to 0.1.1
(#539)
* chore(deps): bump github.com/anchore/go-logger from 0.1.0 to
0.1.1 (#540)
* chore(deps): bump modernc.org/sqlite from 1.52.0 to 1.53.0
(#541)
* chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7
(#534)
* chore(deps): bump
anchore/workflows/.github/workflows/codeql.yaml (#533)
* chore(deps): bump
anchore/workflows/.github/workflows/check-gate.yaml (#531)
* Mon Jun 08 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.6.7:
* chore(deps): update anchore dependencies (#518)
* chore(deps): bump docker/setup-buildx-action from 3.12.0 to
4.1.0 (#520)
* Thu Jun 04 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.6.6 (.5 was not released):
* update to dockers_v2 for goreleaser (#519)
* chore(deps): update anchore dependencies (#513)
* Pass 'contents: read' to check-gate workflow (#516)
* chore(deps): bump the actions-minor-patch group across 1
directory with 6 updates (#514)
* chore(deps): update anchore dependencies (#505)
* chore(deps): bump the go-minor-patch group across 1 directory
with 2 updates (#512)
* chore(deps): bump the actions-minor-patch group across 1
directory with 6 updates (#511)
* chore(deps): bump github.com/containerd/containerd/v2 (#510)
* chore(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to
5.19.1 (#509)
* chore(deps): bump golang.org/x/term (#507)
* remove release notification (#508)
* Port to go-make (#506)
* chore(deps): update anchore dependencies (#503)
* chore(deps): update anchore dependencies (#485)
* chore(deps): update tool versions (#495)
* use released shared workflow (#502)
* chore(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to
5.19.0 (#501)
* chore(deps): bump github.com/gookit/color from 1.6.0 to 1.6.1
(#499)
* Tighten workflow permissions, update release shape, and fix
dependabot config (#498)
* chore(deps): bump github/codeql-action from 4.35.2 to 4.35.3
(#496)
* chore(deps): bump slackapi/slack-github-action from 3.0.2 to
3.0.3 (#497)
* chore(deps): update tool versions (#493)
* chore(deps): bump github.com/anchore/syft (#494)
* chore(deps): bump github.com/github/go-spdx/v2 from 2.4.0 to
2.6.0 (#486)
* chore(deps): bump modernc.org/sqlite from 1.48.2 to 1.50.0
(#491)
* chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.9 to
6.7.10 (#489)
* chore(deps): bump slackapi/slack-github-action from 3.0.1 to
3.0.2 (#490)
* chore: remove common workflows (#492)
* chore(deps): update tool versions (#488)
* chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2
(#484)
* chore(deps): update anchore dependencies (#480)
* chore(deps): update tool versions (#482)
* restore go minimum version to 1.25.8 (#481)
* chore(deps): bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3
(#478)
* chore(deps): bump actions/cache in /.github/actions/bootstrap
(#479)
* chore(deps): bump modernc.org/sqlite from 1.48.1 to 1.48.2
(#472)
* chore(deps): update anchore dependencies (#469)
* chore(deps): update tool versions (#470)
* chore(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to
5.18.0 (#477)
* chore(deps): bump golang.org/x/term from 0.41.0 to 0.42.0
(#476)
* chore(deps): update tools to latest versions (#451)
* chore(deps): update tool versions (#452)
* chore(deps): bump github/codeql-action from 4.32.6 to 4.35.1
(#459)
* chore(deps): update Go version (#468)
* chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to
4.1.4 (#457)
* chore(deps): bump go.opentelemetry.io/otel/sdk from 1.40.0 to
1.43.0 (#463)
* chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3
(#462)
* chore(deps): bump github.com/hashicorp/go-getter from 1.8.5 to
1.8.6 (#467)
* chore(deps): bump modernc.org/sqlite from 1.47.0 to 1.48.1
(#465)
* chore(deps): bump docker/login-action from 4.0.0 to 4.1.0
(#466)
* chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.8 to
6.7.9 (#464)
* chore(deps): bump
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream (#461)
* chore: update zizmor workflow triggers (#456)
* chore: add security-events write permission for zizmor (#455)
* (chore): removing automations (#453)
* chore(deps): update tools to latest versions (#445)
* chore(deps): update anchore dependencies (#447)
* chore(deps): update tool versions (#444)
* chore(deps): bump github.com/go-git/go-git/v5 from 5.17.0 to
5.17.1 (#450)
* chore(deps): bump actions/setup-go in
/.github/actions/bootstrap (#448)
* chore(deps): bump actions/setup-go from 6.3.0 to 6.4.0 (#449)
* chore(deps): bump actions/cache in /.github/actions/bootstrap
(#442)
* chore(deps): bump modernc.org/sqlite from 1.46.1 to 1.47.0
(#441)
* chore(deps): pin certain go dependencies (#438)
* fix: --dry-run status code correction (#398)
* chore(deps): update tools to latest versions (#434)
* chore(deps): bump slackapi/slack-github-action from 2.1.1 to
3.0.1 (#435)
* chore(deps): bump actions/create-github-app-token from 2.2.1 to
3.0.0 (#436)
* Fri Mar 20 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.6.4:
* chore(deps): update anchore dependencies (#433)
* chore(deps): bump google.golang.org/grpc from 1.76.0 to 1.79.3
(#432)
* chore(deps): update tools to latest versions (#426)
* chore(deps): bump docker/login-action from 3.7.0 to 4.0.0
(#428)
* chore(deps): bump github/codeql-action from 4.32.3 to 4.32.6
(#429)
* chore(deps): bump golang.org/x/term from 0.40.0 to 0.41.0
(#431)
* chore(deps): update tools to latest versions (#425)
* Tue Mar 10 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.6.3:
* chore(deps): update anchore dependencies (#424)
* chore(deps): update tools to latest versions (#423)
* chore(deps): bump actions/setup-go in
/.github/actions/bootstrap (#421)
* chore(deps): bump actions/setup-go from 6.2.0 to 6.3.0 (#422)
* chore(deps): update tools to latest versions (#415)
* chore(deps): bump github.com/cloudflare/circl from 1.6.1 to
1.6.3 (#417)
* chore(deps): bump modernc.org/sqlite from 1.45.0 to 1.46.1
(#418)
* chore(deps): bump github.com/github/go-spdx/v2 from 2.3.6 to
2.4.0 (#419)
* chore(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to
1.40.0 (#420)
* chore(deps): update tools to latest versions (#414)
* chore(deps): update tools to latest versions (#407)
* chore(deps): bump github/codeql-action from 4.31.10 to 4.32.3
(#413)
* Thu Feb 19 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.6.2 (.1 was not released):
* fix: add --provenance=false for build flags (#410)
* chore(deps): update anchore dependencies (#409)
* chore: bump to go 1.25.7 (#408)
* chore(deps): update tools to latest versions (#404)
* chore(deps): bump modernc.org/sqlite from 1.44.3 to 1.45.0
(#405)
* chore(deps): bump golang.org/x/term from 0.39.0 to 0.40.0
(#406)
* Wed Feb 11 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.6.0:
* Added Features
- bug: Support new opensource.org license URLs [#208]
* Bug Fixes
- skip dir symlinks in grant license search [#399 @spiffcs]
- bug: "[0090] ERROR unable to classify license: unable to
read" on symlinkx [#70]
- bug: [0000] ERROR unable to determine case for -: unable to
determine SBOM or licenses for stdin: sbom format not
recognized [#215 #397 @spiffcs]
* Dependencies
- chore(deps): update anchore dependencies (#403)
- chore(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to
5.16.5 (#402)
- chore(deps): bump zizmorcore/zizmor-action from 0.4.1 to
0.5.0 (#400)
- chore(deps): update tools to latest versions (#395)
- chore(deps): bump actions/cache in /.github/actions/bootstrap
(#396)
- chore(deps): bump docker/login-action from 3.6.0 to 3.7.0
(#394)
* Wed Feb 04 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.5.8:
* chore(deps): update anchore dependencies (#393)
* chore(deps): update tools to latest versions (#392)
* Fri Jan 30 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.5.7:
* chore(deps): update anchore dependencies (#391)
* chore(deps): bump peter-evans/create-pull-request from 8.0.0 to
8.1.0 (#390)
* chore(deps): update tools to latest versions (#388)
* chore(deps): bump modernc.org/sqlite from 1.44.2 to 1.44.3
(#389)
* chore(deps): update tools to latest versions (#387)
* Wed Jan 28 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.5.6:
* chore(deps): update anchore dependencies (#386)
* chore(deps): bump actions/cache in /.github/actions/bootstrap
(#384)
* chore(deps): bump modernc.org/sqlite from 1.44.1 to 1.44.2
(#383)
* chore(deps): bump zizmorcore/zizmor-action from 0.3.0 to 0.4.1
(#385)
* chore(deps): update tools to latest versions (#382)
* chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#381)
* chore(deps): update tools to latest versions (#380)
* chore(deps): update tools to latest versions (#377)
* chore(deps): bump modernc.org/sqlite from 1.44.0 to 1.44.1
(#378)
* ci: configure zizmor to fail PRs, address lints (#379)
* chore: switch to official slack action (#376)
* Fri Jan 16 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.5.5:
* chore(deps): update anchore dependencies (#375)
* chore(deps): update tools to latest versions (#374)
* chore(deps): bump actions/setup-go in
/.github/actions/bootstrap (#370)
* chore(deps): bump actions/setup-go from 6.1.0 to 6.2.0 (#371)
* chore(deps): bump modernc.org/sqlite from 1.43.0 to 1.44.0
(#372)
* chore(deps): bump github.com/github/go-spdx/v2 from 2.3.5 to
2.3.6 (#373)
* chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0
(#368)
* chore(deps): bump github/codeql-action from 4.31.9 to 4.31.10
(#369)
* chore(deps): update tools to latest versions (#367)
* chore(deps): update tools to latest versions (#365)
* chore(deps): bump modernc.org/sqlite from 1.42.2 to 1.43.0
(#366)
* ci: slack notify team of new grant release (#364)
* chore(deps): update tools to latest versions (#361)
* Sun Jan 11 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.5.4:
* chore(deps): update anchore dependencies (#360)
* chore(deps): update tools to latest versions (#358)
* chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.7 to
6.7.8 (#357)
* chore(deps): bump modernc.org/sqlite from 1.41.0 to 1.42.2
(#359)
* Sun Jan 11 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.5.3:
* chore(deps): bump github.com/anchore/syft from 1.38.2 to 1.39.0
(#356)
* chore(deps): update tools to latest versions (#355)
* chore(deps): update tools to latest versions (#352)
* chore(deps): bump modernc.org/sqlite from 1.40.1 to 1.41.0
(#353)
* signpost to docs site (#351)
* chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.5 to
6.7.7 (#344)
* chore(deps): bump github.com/anchore/stereoscope from 0.1.14 to
0.1.16 (#346)
* chore(deps): update tools to latest versions (#340)
* chore(deps): bump peter-evans/create-pull-request from 7.0.11
to 8.0.0 (#345)
* chore(deps): bump actions/cache in /.github/actions/bootstrap
(#349)
* chore(deps): bump github/codeql-action from 4.31.7 to 4.31.9
(#350)
* chore(deps): update anchore dependencies (#341)
* Thu Dec 11 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.5.2:
* chore(deps): update anchore dependencies (#339)
* chore(deps): bump github/codeql-action from 4.31.6 to 4.31.7
(#336)
* chore(deps): update tools to latest versions (#335)
* chore(deps): bump peter-evans/create-pull-request from 7.0.9 to
7.0.11 (#337)
* chore(deps): bump actions/create-github-app-token from 2.2.0 to
2.2.1 (#338)
* chore(deps): update tools to latest versions (#332)
* chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2
(#333)
* chore(deps): bump github.com/github/go-spdx/v2 from 2.3.4 to
2.3.5 (#334)
* chore(deps): update tools to latest versions (#314)
* chore(deps): bump modernc.org/sqlite from 1.40.0 to 1.40.1
(#317)
* chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0
(#321)
* chore(deps): bump actions/setup-go from 6.0.0 to 6.1.0 (#322)
* chore(deps): bump actions/setup-go in
/.github/actions/bootstrap (#323)
* chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.2 to
6.7.5 (#324)
* chore(deps): bump peter-evans/create-pull-request from 7.0.8 to
7.0.9 (#326)
* chore(deps): bump zizmorcore/zizmor-action from 0.2.0 to 0.3.0
(#328)
* chore(deps): bump actions/create-github-app-token from 2.1.4 to
2.2.0 (#329)
* chore(deps): bump github/codeql-action from 4.31.2 to 4.31.6
(#330)
* chore(deps): bump actions/checkout from 5.0.0 to 6.0.1 (#331)
* Tue Nov 18 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.5.1:
* fix: add case handler for panic (#309)
* chore(deps): update anchore dependencies (#316)
* chore(deps): update tools to latest versions (#312)
* chore(deps): bump golang.org/x/term from 0.36.0 to 0.37.0
(#313)
* chore(deps): bump docker/login-action from 3.5.0 to 3.6.0
(#304)
* chore(deps): bump github.com/opencontainers/selinux (#311)
* chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.9 to
6.7.1 (#310)
* chore(deps): update tools to latest versions (#305)
* chore(deps): bump github.com/containerd/containerd from 1.7.28
to 1.7.29 (#308)
* Tue Nov 04 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.5.0:
* Added Features
- Add a supported docker image [#222 #279 @wagoodman]
* Dependencies
- chore(deps): bump github.com/anchore/syft from 1.36.0 to
1.37.0 (#298)
- chore(deps): bump actions/setup-go from 5.0.0 to 6.0.0 (#302)
- chore(deps): bump actions/checkout from 4.1.1 to 5.0.0 (#303)
- chore(deps): bump peter-evans/create-pull-request from 7.0.5
to 7.0.8 (#301)
- chore(deps): bump zizmorcore/zizmor-action from 0.1.1 to
0.2.0 (#300)
- chore(deps): bump github/codeql-action from 3.23.2 to 4.31.2
(#299)
- chore(deps): bump github.com/anchore/stereoscope from 0.1.11
to 0.1.12 (#297)
- chore(deps): bump actions/setup-go in
/.github/actions/bootstrap (#296)
- chore(deps): update tools to latest versions (#294)
- chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.8
to 6.6.9 (#291)
- chore(deps): bump modernc.org/sqlite from 1.39.1 to 1.40.0
(#292)
* Fri Oct 24 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.4.0:
* Added Features
- upgrade Syft to pull in pnpm and pdm license detection
improvements [#290 @anchore-actions-token-generator]
* Dependencies
- chore(deps): update anchore dependencies (#290)
- chore(deps): bump github.com/github/go-spdx/v2 from 2.3.3 to
2.3.4 (#289)
* Fri Oct 17 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.3.4:
* Bug Fixes
- pull in syft 1.34.2 to fix panic in jar cataloger [#288
@anchore-actions-token-generator]
* Fri Oct 17 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.3.3:
* Bug Fixes
- "grant --version" and "grant version" report different
versions [#277 #278 @popey]
* Additional Changes
- bump cosign version [#287 @spiffcs]
- cosign flag update for release [#286 @spiffcs]
- actions: Grant validations [#275 @spiffcs]
* Dependencies
- chore(deps): update anchore dependencies (#283)
- chore(deps): bump golang.org/x/term from 0.35.0 to 0.36.0
(#280)
- chore(deps): bump modernc.org/sqlite from 1.39.0 to 1.39.1
(#282)
* Thu Sep 18 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.3.2:
* fix: globs were not being parsed correctly from config (#274)
* feat: add OSI warning text (#273)
* feat: add coloring to risk output (#272)
* fix: update grant so it can consume it's own json as source &&
stdin (#271)
* chore: generate demo via taskfile `make demo` (#270)
* docs: vhs gif (#269)
* docs: modify license settings and enhance README clarity (#267)
* Thu Sep 18 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.3.1:
* Bug Fixes
- update version and verbose in new grant [#265 @spiffcs]
* Thu Sep 18 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.3.0:
* Warning
- v0.3.0 has a brand new config that is not compatible with
prior versions <= v0.2.9. Please make sure to read the new
documentation on configuration setup before upgrading.
* Added Features
- rework and simplify configuration to allow for deny on (no
licenses) [#249 @spiffcs]
- update list with new ui/detail [#256 @spiffcs]
- update check with links and new user ergonomics [#259
@spiffcs]
- Add a --dry-run / --allow-failure to grant check [#214]
* Bug Fixes
- update grant to process only common license file names [#237
@spiffcs]
- Remove blanks from badge gaps [#258 @popey]
- stdin-fix [#260 @spiffcs]
- simplify tui in lieu of clio upgrade [#262 @spiffcs]
- panic: send on closed channel [#71]
* Additional Changes
- Risk category [#257 @spiffcs]
* Dependencies
- chore(deps): update anchore dependencies (#254)
- chore(deps): bump modernc.org/sqlite from 1.38.2 to 1.39.0
(#253)
- chore(deps): bump github.com/charmbracelet/bubbletea from
1.3.6 to 1.3.9 (#252)
- chore(deps): bump github.com/hashicorp/go-getter from 1.7.8
to 1.7.9 (#239)
- chore(deps): bump github.com/anchore/syft from
1.31.1-0.20250818141439-ba2eb5701fb4 to 1.32.0 (#243)
- chore(deps): bump github.com/ulikunitz/xz from 0.5.12 to
0.5.14 (#246)
- chore(deps): bump github.com/anchore/stereoscope from 0.1.8
to 0.1.9 (#242)
- chore(deps): bump github.com/stretchr/testify from 1.10.0 to
1.11.1 (#244)
- chore(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.0
(#247)
- chore(deps): bump github.com/gookit/color from 1.5.4 to 1.6.0
(#245)
- chore(deps): bump github.com/anchore/syft from 1.30.0 to
1.31.0 (#236)
* Sun Aug 10 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.2.9:
* chore(deps): update anchore dependencies (#235)
* chore(deps): bump github.com/anchore/syft from 1.29.0 to 1.29.1
(#233)
* chore(deps): bump github.com/anchore/stereoscope (#234)
* change install URL to get.anchore.io/grant (#232)
* chore(deps): bump github.com/docker/docker (#230)
* chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.13
to 0.5.14 (#228)
* chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.7 to
6.6.8 (#229)
* Thu Jul 24 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.2.8:
* chore: update credentials for release (#227)
* chore(deps): update anchore dependencies (#226)
* chore(deps): bump github.com/charmbracelet/bubbletea from 1.3.5
to 1.3.6 (#224)
* chore: lint gh actions with zizmor (#225)
* chore(deps): update anchore dependencies (#223)
* chore(deps): bump github.com/go-viper/mapstructure/v2 (#221)
* chore(deps): bump github.com/anchore/syft from 1.27.0 to 1.27.1
(#220)
* chore(deps): bump github.com/anchore/syft from 1.26.1 to 1.27.0
(#219)
* chore(deps): bump github.com/anchore/stereoscope from 0.1.4 to
0.1.5 (#218)
* chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.12
to 0.5.13 (#216)
* chore(deps): bump github.com/anchore/syft from 1.24.0 to 1.26.1
(#212)
* chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.11
to 0.5.12 (#213)
* chore(deps): bump github.com/anchore/syft from 1.23.1 to 1.24.0
(#207)
* chore(deps): bump github.com/github/go-spdx/v2 from 2.3.2 to
2.3.3 (#206)
* Wed Apr 30 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 0.2.7:
* chore(deps): bump github.com/anchore/syft from 1.23.0 to 1.23.1
(#203)
* chore(deps): update anchore dependencies (#202)
* feat: bump go version (#201)
* chore(deps): bump github.com/anchore/stereoscope from 0.1.2 to
0.1.3 (#199)
* chore(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 (#200)
* chore(deps): bump github.com/anchore/stereoscope (#198)
* chore(deps): bump github.com/containerd/containerd from 1.7.24
to 1.7.27 (#193)
* chore(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0
(#186)
* chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.6 to
6.6.7 (#190)
* chore(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 (#191)
* chore(deps): bump github.com/charmbracelet/bubbletea from 1.3.3
to 1.3.4 (#189)
* chore(deps): bump github.com/charmbracelet/lipgloss from 1.0.0
to 1.1.0 (#192)
* chore(deps): bump github.com/anchore/syft from 1.19.0 to 1.20.0
(#187)
* chore: cache update (#185)
* chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.10
to 0.5.11 (#184)
* chore(deps): bump github.com/charmbracelet/bubbletea from 1.3.0
to 1.3.3 (#181)
* feat: update to go 1.24.x (#182)
* chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.5 to
6.6.6 (#180)
* chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.9 to
0.5.10 (#178)
* chore(deps): bump github.com/charmbracelet/bubbletea from 1.2.4
to 1.3.0 (#177)
* chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.8 to
0.5.9 (#175)
* chore(deps): update anchore dependencies (#174)
* Thu Jan 23 2025 opensuse_buildservice@ojkastl.de
- Update to version 0.2.6:
* chore: update token to use oss tooling; (#173)
* chore(deps): update anchore dependencies (#172)
* chore(deps): bump github.com/anchore/stereoscope from 0.0.12 to
0.0.13 (#171)
* chore(deps): bump github.com/anchore/stereoscope from 0.0.11 to
0.0.12 (#170)
* chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.7 to
0.5.8 (#169)
* chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.4 to
6.6.5 (#168)
* Sun Dec 15 2024 opensuse_buildservice@ojkastl.de
- Update to version 0.2.5:
* chore: update syft/stereoscope for release (#167)
* chore(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0
(#166)
* add update anchore dependencies workflow (#165)
* chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.2 to
6.6.4 (#163)
* chore(deps): bump github.com/anchore/syft from 1.17.0 to 1.18.0
(#164)
* chore(deps): bump github.com/charmbracelet/bubbletea from 1.2.3
to 1.2.4 (#159)
* chore(deps): bump github.com/stretchr/testify from 1.9.0 to
1.10.0 (#158)
* Fri Dec 06 2024 opensuse_buildservice@ojkastl.de
- Update to version 0.2.4:
* dependencies: latest syft and stereoscope (#156)
* chore(deps): bump github.com/charmbracelet/bubbletea from 1.2.2
to 1.2.3 (#155)
* chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.1 to
6.6.2 (#153)
* chore(deps): bump github.com/anchore/stereoscope (#150)
* chore(deps): bump github.com/charmbracelet/bubbletea from 1.1.2
to 1.2.2 (#152)
* chore: update trigger-release.sh same as syft/grype (#148)
* chore(deps): bump github.com/anchore/syft from 1.14.2 to 1.16.0
(#147)
* Changed exclusions to exceptions (#142)
* chore(deps): bump github.com/charmbracelet/lipgloss from 0.13.1
to 1.0.0 (#146)
* chore(deps): bump github.com/anchore/stereoscope (#145)
* chore(deps): bump github.com/charmbracelet/lipgloss (#141)
* chore(deps): bump github.com/charmbracelet/bubbletea from 1.1.1
to 1.1.2 (#143)
* chore(deps): bump github.com/anchore/syft from 1.14.1 to 1.14.2
(#140)
* chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.0 to
6.6.1 (#138)
* Fri Dec 06 2024 opensuse_buildservice@ojkastl.de
- Update to version 0.2.3:
* update syft to v1.14.1 (#137)
* add release docs (#134)
* chore(deps): bump github.com/anchore/syft from 1.13.0 to 1.14.0
(#133)
* Fri Dec 06 2024 opensuse_buildservice@ojkastl.de
- Update to version 0.2.2:
* feature: add support for allowlists (#123)
* fix: Update to support #101 (#124)
* chore: bump go version for build (#132)
* chore(deps): bump github.com/anchore/syft from 1.11.1 to 1.13.0
(#129)
* add awaiting response management (#130)
* chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.5.9 to
6.6.0 (#131)
* chore(deps): bump github.com/anchore/syft from 1.11.0 to 1.11.1
(#116)
* chore(deps): bump github.com/charmbracelet/bubbletea (#114)
* chore(deps): bump github.com/anchore/syft from 1.10.0 to 1.11.0
(#113)
* chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.6 to
0.5.7 (#112)
* chore(deps): bump github.com/anchore/syft from 1.9.0 to 1.10.0
(#111)
* chore(deps): bump github.com/docker/docker (#110)
* chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.5 to
0.5.6 (#109)
* chore(deps): bump github.com/anchore/syft from 1.8.0 to 1.9.0
(#103)
* chore: Add issue templates (#107)
* docs: CODE_OF_CONDUCT.md (#106)
* chore(deps): bump github.com/charmbracelet/lipgloss (#105)
* chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.4 to
0.5.5 (#108)
* chore(deps): bump github.com/charmbracelet/lipgloss (#102)
* Thu Jul 11 2024 opensuse_buildservice@ojkastl.de
- Update to version 0.2.1:
* fix: allow brew release (#100)
* chore: update wait for check to use latest node
* chore: rename token to internal scheme (#99)
* chore(deps): bump github.com/charmbracelet/bubbletea (#96)
* chore(deps): bump github.com/anchore/syft from 1.7.0 to 1.8.0 (#97)
* chore(deps): bump github.com/anchore/syft from 1.5.0 to 1.7.0 (#93)
* chore(deps): bump github.com/github/go-spdx/v2 from 2.2.0 to 2.3.1 (#94)
* chore(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 (#92)
* chore(deps): bump github.com/anchore/syft from 1.4.1 to 1.5.0 (#89)
* chore(deps): bump github.com/charmbracelet/bubbletea (#90)
* Thu Jul 11 2024 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- new package grant: search an SBOM for licenses and the packages
they belong to
/usr/bin/grant /usr/share/doc/packages/grant /usr/share/doc/packages/grant/README.md /usr/share/licenses/grant /usr/share/licenses/grant/LICENSE
Generated by rpm2html 1.8.1
Fabrice Bellet, Mon Nov 9 23:15:40 2026