Merge pull request #33 from scality/update-dependencies

⬆️ bump scanner versions

Author: m4nch0t

README.md

@@ -24,8 +24,8 @@ The main [SBOM action](action.yaml) is responsible for generating SBOMs.
 
 | Parameter            | Description                                                                                 | Default      |
 | -------------------- | ------------------------------------------------------------------------------------------- | ------------ |
-| `grype-version`      | Grype version to use                                                                        | `0.102.0`     |
-| `syft-version`       | Syft version to use                                                                         | `1.29.0`     |
+| `grype-version`      | Grype version to use                                                                        | `0.104.0`     |
+| `syft-version`       | Syft version to use                                                                         | `1.38.0`     |
 | `target`             | The target to scan (path or image)                                                          | `./`         |
 | `target-type`        | Type of target to scan (file, directory, image, iso)                                        | `file`       |
 | `output-format`      | Format of the generated SBOM <br> (cyclonedx-json cyclonedx-xml github-json spdx-json spdx-tag-value syft-json syft-table syft-text template) | `cyclonedx-json` |
@@ -185,7 +185,7 @@ In the generated SBOM files, you will find CycloneDX metadata. Examples include:
                     "type": "application",
                     "author": "anchore",
                     "name": "syft",
-                    "version": "1.36.0"
+                    "version": "1.38.0"
                 }
             ]
         },
@@ -216,7 +216,7 @@ In the generated SBOM files, you will find CycloneDX metadata. Examples include:
                     "type": "application",
                     "author": "anchore",
                     "name": "syft",
-                    "version": "1.36.0"
+                    "version": "1.38.0"
                 }
             ]
         },

versions.yaml

@@ -1,12 +1,12 @@
 packages:
   syft:
-    default_version: 1.36.0
+    default_version: 1.38.0
     editor: anchore
     artifact: '{package_name}_{version}_linux_amd64.tar.gz'
     binary: syft
     checksums: true
   grype:
-    default_version: 0.102.0
+    default_version: 0.104.0
     editor: anchore
     artifact: '{package_name}_{version}_linux_amd64.tar.gz'
     binary: grype