all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fed3:cd86
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: e1e133e6-eb8b-4a8c-8e28-fccd04079d4d
        host_id: 4ba4344415ca7057d9956ea5de826bbc0b830981e82c0e0f191fa07b
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fed3:cd86
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.7.249
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.192.91
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fed3:cd86
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job flake8 explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#32>'
      - '<Job flake8 explicit: None implied: None source: osism/release/.zuul.yaml@main#14>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 17afdff6934d45bfbac9b2137221f1ca
      build_refs:
      - branch: main
        change: '2599'
        change_message: "chore(deps): update anchore/syft docker tag to v1.48.0\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [anchore/syft](https://redirect.github.com/anchore/syft) | minor | `v1.46.0`
          \u2192 `v1.48.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>anchore/syft
          (anchore/syft)</summary>\n\n### [`v1.48.0`](https://redirect.github.com/anchore/syft/releases/tag/v1.48.0)\n\n[Compare
          Source](https://redirect.github.com/anchore/syft/compare/v1.46.0...v1.48.0)\n\n#####
          Added Features\n\n- emit dependency relationships from mix.lock \\[PR [#&#8203;4985](https://redirect.github.com/anchore/syft/pull/4985)
          [@&#8203;cgreeno](https://redirect.github.com/cgreeno)]\n- add safe tensor
          model type to SBOM output \\[PR [#&#8203;4844](https://redirect.github.com/anchore/syft/pull/4844)
          [@&#8203;spiffcs](https://redirect.github.com/spiffcs)]\n- Capture golang
          binary symbols \\[PR [#&#8203;4988](https://redirect.github.com/anchore/syft/pull/4988)
          [@&#8203;spiffcs](https://redirect.github.com/spiffcs)]\n- Detect Ubuntu
          Pro/ESM extended support \\[PR [#&#8203;5028](https://redirect.github.com/anchore/syft/pull/5028)
          [@&#8203;wagoodman](https://redirect.github.com/wagoodman)]\n- Add scan
          duration timer to Syft \\[Issue [#&#8203;4587](https://redirect.github.com/anchore/syft/issues/4587)]
          \\[PR [#&#8203;4858](https://redirect.github.com/anchore/syft/pull/4858)
          [@&#8203;ChrisJr404](https://redirect.github.com/ChrisJr404)]\n- Support
          for `vcpkg` \\[Issue [#&#8203;2110](https://redirect.github.com/anchore/syft/issues/2110)]
          \\[PR [#&#8203;4081](https://redirect.github.com/anchore/syft/pull/4081)
          [@&#8203;gabetrau](https://redirect.github.com/gabetrau)]\n- Add macOS `.app`
          cataloger \\[Issue [#&#8203;4010](https://redirect.github.com/anchore/syft/issues/4010)]
          \\[PR [#&#8203;4490](https://redirect.github.com/anchore/syft/pull/4490)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- Add support for
          Kerberos 5 library cataloging \\[Issue [#&#8203;4780](https://redirect.github.com/anchore/syft/issues/4780)]
          \\[PR [#&#8203;4781](https://redirect.github.com/anchore/syft/pull/4781)
          [@&#8203;nadimz](https://redirect.github.com/nadimz)]\n- Include date of
          scan in results \\[Issue [#&#8203;3910](https://redirect.github.com/anchore/syft/issues/3910)]\n\n#####
          Bug Fixes\n\n- use printf instead of echo to fix ANSI color output \\[PR
          [#&#8203;4978](https://redirect.github.com/anchore/syft/pull/4978) [@&#8203;Jouini-Mohamed-Chaker](https://redirect.github.com/Jouini-Mohamed-Chaker)]\n-
          Strip peer-dep suffix from deno.lock npm keys \\[PR [#&#8203;5055](https://redirect.github.com/anchore/syft/pull/5055)
          [@&#8203;Synvoya](https://redirect.github.com/Synvoya)]\n- Allow more PEP440-compliant
          characters in python versions \\[PR [#&#8203;4964](https://redirect.github.com/anchore/syft/pull/4964)
          [@&#8203;kzantow](https://redirect.github.com/kzantow)]\n- PE case-insensitive
          extensions (Win32/ISO 9660 compatibility) \\[PR [#&#8203;4996](https://redirect.github.com/anchore/syft/pull/4996)
          [@&#8203;activeobd](https://redirect.github.com/activeobd)]\n- Fix panic
          parsing a rockspec comment that ends at EOF \\[PR [#&#8203;5053](https://redirect.github.com/anchore/syft/pull/5053)
          [@&#8203;arpitjain099](https://redirect.github.com/arpitjain099)]\n- Fix
          Debian point release detection \\[PR [#&#8203;4997](https://redirect.github.com/anchore/syft/pull/4997)
          [@&#8203;OsamaSE](https://redirect.github.com/OsamaSE)]\n- Fix `mix.lock`
          git/path deps mislabeled as hex.pm packages with bogus PURLs \\[PR [#&#8203;5041](https://redirect.github.com/anchore/syft/pull/5041)
          [@&#8203;Synvoya](https://redirect.github.com/Synvoya)]\n- npm redis client
          generates no CPE \\[Issue [#&#8203;5011](https://redirect.github.com/anchore/syft/issues/5011)]
          \\[PR [#&#8203;5012](https://redirect.github.com/anchore/syft/pull/5012)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- Debug Docker
          images are running as nonroot user \\[Issue [#&#8203;4113](https://redirect.github.com/anchore/syft/issues/4113)]
          \\[PR [#&#8203;4608](https://redirect.github.com/anchore/syft/pull/4608)
          [@&#8203;spiffcs](https://redirect.github.com/spiffcs)]\n- libxml2 gets
          the wrong cpe vendor \\[Issue [#&#8203;5015](https://redirect.github.com/anchore/syft/issues/5015)]
          \\[PR [#&#8203;5016](https://redirect.github.com/anchore/syft/pull/5016)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- wrong purl for
          spring-ldap-core dependency \\[Issue [#&#8203;4030](https://redirect.github.com/anchore/syft/issues/4030)]
          \\[PR [#&#8203;4908](https://redirect.github.com/anchore/syft/pull/4908)
          [@&#8203;jonasboos](https://redirect.github.com/jonasboos)]\n- Swift: CVEs
          missed by Grype when using Syft-generated SBOMs \u2013 missing group field
          breaks PURL matching \\[Issue [#&#8203;3961](https://redirect.github.com/anchore/syft/issues/3961)]
          \\[PR [#&#8203;4785](https://redirect.github.com/anchore/syft/pull/4785)
          [@&#8203;SAY-5](https://redirect.github.com/SAY-5)]\n- conanfile.txt: dependencies
          after a comment line in \\[requires] are not detected \\[Issue [#&#8203;5017](https://redirect.github.com/anchore/syft/issues/5017)]
          \\[PR [#&#8203;5020](https://redirect.github.com/anchore/syft/pull/5020)
          [@&#8203;jfjrh2014](https://redirect.github.com/jfjrh2014)]\n- dotnet cataloger
          can't find packages from deps.json in linux elf single-file bundles \\[Issue
          [#&#8203;4514](https://redirect.github.com/anchore/syft/issues/4514)] \\[PR
          [#&#8203;4517](https://redirect.github.com/anchore/syft/pull/4517) [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n-
          Go template sprig date functions not defined \\[Issue [#&#8203;2372](https://redirect.github.com/anchore/syft/issues/2372)]
          \\[PR [#&#8203;4644](https://redirect.github.com/anchore/syft/pull/4644)
          [@&#8203;sputnik-mac](https://redirect.github.com/sputnik-mac)]\n- CycloneDX
          BOM contains invalid externalReferences URL from unresolved Ruby gemspec
          interpolation (e.g. #{s.name}) \\[Issue [#&#8203;4720](https://redirect.github.com/anchore/syft/issues/4720)]
          \\[PR [#&#8203;4782](https://redirect.github.com/anchore/syft/pull/4782)
          [@&#8203;SAY-5](https://redirect.github.com/SAY-5)]\n\n##### Dependencies\n\n9
          dependency changes (8 updated, 1 added).\n\n<details>\n<summary>Updated
          (8 packages)</summary>\n\n- github.com/bmatcuk/doublestar `v1.3.1` \u2192
          `v8.8.8`\n- github.com/klauspost/compress `v1.18.6` \u2192 `v1.19.0`\n-
          golang.org/x/tools `v0.46.0` \u2192 `v0.47.0`\n- modernc.org/cc/v4 `v4.28.2`
          \u2192 `v4.28.4`\n- modernc.org/ccgo/v4 `v4.34.0` \u2192 `v4.34.4`\n- modernc.org/gc/v3
          `v3.1.2` \u2192 `v3.1.3`\n- modernc.org/libc `v1.72.3` \u2192 `v1.73.4`\n-
          modernc.org/sqlite `v1.51.0` \u2192 `v1.53.0`\n\n</details>\n\n<details>\n<summary>Added
          (1 package)</summary>\n\n- howett.net/plist `v1.0.1`\n\n</details>\n\n**[(Full
          Changelog)](https://redirect.github.com/anchore/syft/compare/v1.46.0...v1.47.1)**\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
          manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
          conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
          Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNjUuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI2NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/release/pull/2599
        commit_id: f70dace5d76f0020694929312321c1be823dcc5d
        patchset: f70dace5d76f0020694929312321c1be823dcc5d
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          name: osism/release
          short_name: release
        src_dir: src/github.com/osism/release
        topic: null
      buildset: 3b961cfbb9dc4fcb8137be8535957f8e
      buildset_refs:
      - branch: main
        change: '2599'
        change_message: "chore(deps): update anchore/syft docker tag to v1.48.0\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [anchore/syft](https://redirect.github.com/anchore/syft) | minor | `v1.46.0`
          \u2192 `v1.48.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>anchore/syft
          (anchore/syft)</summary>\n\n### [`v1.48.0`](https://redirect.github.com/anchore/syft/releases/tag/v1.48.0)\n\n[Compare
          Source](https://redirect.github.com/anchore/syft/compare/v1.46.0...v1.48.0)\n\n#####
          Added Features\n\n- emit dependency relationships from mix.lock \\[PR [#&#8203;4985](https://redirect.github.com/anchore/syft/pull/4985)
          [@&#8203;cgreeno](https://redirect.github.com/cgreeno)]\n- add safe tensor
          model type to SBOM output \\[PR [#&#8203;4844](https://redirect.github.com/anchore/syft/pull/4844)
          [@&#8203;spiffcs](https://redirect.github.com/spiffcs)]\n- Capture golang
          binary symbols \\[PR [#&#8203;4988](https://redirect.github.com/anchore/syft/pull/4988)
          [@&#8203;spiffcs](https://redirect.github.com/spiffcs)]\n- Detect Ubuntu
          Pro/ESM extended support \\[PR [#&#8203;5028](https://redirect.github.com/anchore/syft/pull/5028)
          [@&#8203;wagoodman](https://redirect.github.com/wagoodman)]\n- Add scan
          duration timer to Syft \\[Issue [#&#8203;4587](https://redirect.github.com/anchore/syft/issues/4587)]
          \\[PR [#&#8203;4858](https://redirect.github.com/anchore/syft/pull/4858)
          [@&#8203;ChrisJr404](https://redirect.github.com/ChrisJr404)]\n- Support
          for `vcpkg` \\[Issue [#&#8203;2110](https://redirect.github.com/anchore/syft/issues/2110)]
          \\[PR [#&#8203;4081](https://redirect.github.com/anchore/syft/pull/4081)
          [@&#8203;gabetrau](https://redirect.github.com/gabetrau)]\n- Add macOS `.app`
          cataloger \\[Issue [#&#8203;4010](https://redirect.github.com/anchore/syft/issues/4010)]
          \\[PR [#&#8203;4490](https://redirect.github.com/anchore/syft/pull/4490)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- Add support for
          Kerberos 5 library cataloging \\[Issue [#&#8203;4780](https://redirect.github.com/anchore/syft/issues/4780)]
          \\[PR [#&#8203;4781](https://redirect.github.com/anchore/syft/pull/4781)
          [@&#8203;nadimz](https://redirect.github.com/nadimz)]\n- Include date of
          scan in results \\[Issue [#&#8203;3910](https://redirect.github.com/anchore/syft/issues/3910)]\n\n#####
          Bug Fixes\n\n- use printf instead of echo to fix ANSI color output \\[PR
          [#&#8203;4978](https://redirect.github.com/anchore/syft/pull/4978) [@&#8203;Jouini-Mohamed-Chaker](https://redirect.github.com/Jouini-Mohamed-Chaker)]\n-
          Strip peer-dep suffix from deno.lock npm keys \\[PR [#&#8203;5055](https://redirect.github.com/anchore/syft/pull/5055)
          [@&#8203;Synvoya](https://redirect.github.com/Synvoya)]\n- Allow more PEP440-compliant
          characters in python versions \\[PR [#&#8203;4964](https://redirect.github.com/anchore/syft/pull/4964)
          [@&#8203;kzantow](https://redirect.github.com/kzantow)]\n- PE case-insensitive
          extensions (Win32/ISO 9660 compatibility) \\[PR [#&#8203;4996](https://redirect.github.com/anchore/syft/pull/4996)
          [@&#8203;activeobd](https://redirect.github.com/activeobd)]\n- Fix panic
          parsing a rockspec comment that ends at EOF \\[PR [#&#8203;5053](https://redirect.github.com/anchore/syft/pull/5053)
          [@&#8203;arpitjain099](https://redirect.github.com/arpitjain099)]\n- Fix
          Debian point release detection \\[PR [#&#8203;4997](https://redirect.github.com/anchore/syft/pull/4997)
          [@&#8203;OsamaSE](https://redirect.github.com/OsamaSE)]\n- Fix `mix.lock`
          git/path deps mislabeled as hex.pm packages with bogus PURLs \\[PR [#&#8203;5041](https://redirect.github.com/anchore/syft/pull/5041)
          [@&#8203;Synvoya](https://redirect.github.com/Synvoya)]\n- npm redis client
          generates no CPE \\[Issue [#&#8203;5011](https://redirect.github.com/anchore/syft/issues/5011)]
          \\[PR [#&#8203;5012](https://redirect.github.com/anchore/syft/pull/5012)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- Debug Docker
          images are running as nonroot user \\[Issue [#&#8203;4113](https://redirect.github.com/anchore/syft/issues/4113)]
          \\[PR [#&#8203;4608](https://redirect.github.com/anchore/syft/pull/4608)
          [@&#8203;spiffcs](https://redirect.github.com/spiffcs)]\n- libxml2 gets
          the wrong cpe vendor \\[Issue [#&#8203;5015](https://redirect.github.com/anchore/syft/issues/5015)]
          \\[PR [#&#8203;5016](https://redirect.github.com/anchore/syft/pull/5016)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- wrong purl for
          spring-ldap-core dependency \\[Issue [#&#8203;4030](https://redirect.github.com/anchore/syft/issues/4030)]
          \\[PR [#&#8203;4908](https://redirect.github.com/anchore/syft/pull/4908)
          [@&#8203;jonasboos](https://redirect.github.com/jonasboos)]\n- Swift: CVEs
          missed by Grype when using Syft-generated SBOMs \u2013 missing group field
          breaks PURL matching \\[Issue [#&#8203;3961](https://redirect.github.com/anchore/syft/issues/3961)]
          \\[PR [#&#8203;4785](https://redirect.github.com/anchore/syft/pull/4785)
          [@&#8203;SAY-5](https://redirect.github.com/SAY-5)]\n- conanfile.txt: dependencies
          after a comment line in \\[requires] are not detected \\[Issue [#&#8203;5017](https://redirect.github.com/anchore/syft/issues/5017)]
          \\[PR [#&#8203;5020](https://redirect.github.com/anchore/syft/pull/5020)
          [@&#8203;jfjrh2014](https://redirect.github.com/jfjrh2014)]\n- dotnet cataloger
          can't find packages from deps.json in linux elf single-file bundles \\[Issue
          [#&#8203;4514](https://redirect.github.com/anchore/syft/issues/4514)] \\[PR
          [#&#8203;4517](https://redirect.github.com/anchore/syft/pull/4517) [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n-
          Go template sprig date functions not defined \\[Issue [#&#8203;2372](https://redirect.github.com/anchore/syft/issues/2372)]
          \\[PR [#&#8203;4644](https://redirect.github.com/anchore/syft/pull/4644)
          [@&#8203;sputnik-mac](https://redirect.github.com/sputnik-mac)]\n- CycloneDX
          BOM contains invalid externalReferences URL from unresolved Ruby gemspec
          interpolation (e.g. #{s.name}) \\[Issue [#&#8203;4720](https://redirect.github.com/anchore/syft/issues/4720)]
          \\[PR [#&#8203;4782](https://redirect.github.com/anchore/syft/pull/4782)
          [@&#8203;SAY-5](https://redirect.github.com/SAY-5)]\n\n##### Dependencies\n\n9
          dependency changes (8 updated, 1 added).\n\n<details>\n<summary>Updated
          (8 packages)</summary>\n\n- github.com/bmatcuk/doublestar `v1.3.1` \u2192
          `v8.8.8`\n- github.com/klauspost/compress `v1.18.6` \u2192 `v1.19.0`\n-
          golang.org/x/tools `v0.46.0` \u2192 `v0.47.0`\n- modernc.org/cc/v4 `v4.28.2`
          \u2192 `v4.28.4`\n- modernc.org/ccgo/v4 `v4.34.0` \u2192 `v4.34.4`\n- modernc.org/gc/v3
          `v3.1.2` \u2192 `v3.1.3`\n- modernc.org/libc `v1.72.3` \u2192 `v1.73.4`\n-
          modernc.org/sqlite `v1.51.0` \u2192 `v1.53.0`\n\n</details>\n\n<details>\n<summary>Added
          (1 package)</summary>\n\n- howett.net/plist `v1.0.1`\n\n</details>\n\n**[(Full
          Changelog)](https://redirect.github.com/anchore/syft/compare/v1.46.0...v1.47.1)**\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
          manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
          conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
          Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNjUuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI2NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/release/pull/2599
        commit_id: f70dace5d76f0020694929312321c1be823dcc5d
        patchset: f70dace5d76f0020694929312321c1be823dcc5d
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          name: osism/release
          short_name: release
        src_dir: src/github.com/osism/release
        topic: null
      change: '2599'
      change_message: "chore(deps): update anchore/syft docker tag to v1.48.0\n\nThis
        PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
        [anchore/syft](https://redirect.github.com/anchore/syft) | minor | `v1.46.0`
        \u2192 `v1.48.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>anchore/syft
        (anchore/syft)</summary>\n\n### [`v1.48.0`](https://redirect.github.com/anchore/syft/releases/tag/v1.48.0)\n\n[Compare
        Source](https://redirect.github.com/anchore/syft/compare/v1.46.0...v1.48.0)\n\n#####
        Added Features\n\n- emit dependency relationships from mix.lock \\[PR [#&#8203;4985](https://redirect.github.com/anchore/syft/pull/4985)
        [@&#8203;cgreeno](https://redirect.github.com/cgreeno)]\n- add safe tensor
        model type to SBOM output \\[PR [#&#8203;4844](https://redirect.github.com/anchore/syft/pull/4844)
        [@&#8203;spiffcs](https://redirect.github.com/spiffcs)]\n- Capture golang
        binary symbols \\[PR [#&#8203;4988](https://redirect.github.com/anchore/syft/pull/4988)
        [@&#8203;spiffcs](https://redirect.github.com/spiffcs)]\n- Detect Ubuntu Pro/ESM
        extended support \\[PR [#&#8203;5028](https://redirect.github.com/anchore/syft/pull/5028)
        [@&#8203;wagoodman](https://redirect.github.com/wagoodman)]\n- Add scan duration
        timer to Syft \\[Issue [#&#8203;4587](https://redirect.github.com/anchore/syft/issues/4587)]
        \\[PR [#&#8203;4858](https://redirect.github.com/anchore/syft/pull/4858) [@&#8203;ChrisJr404](https://redirect.github.com/ChrisJr404)]\n-
        Support for `vcpkg` \\[Issue [#&#8203;2110](https://redirect.github.com/anchore/syft/issues/2110)]
        \\[PR [#&#8203;4081](https://redirect.github.com/anchore/syft/pull/4081) [@&#8203;gabetrau](https://redirect.github.com/gabetrau)]\n-
        Add macOS `.app` cataloger \\[Issue [#&#8203;4010](https://redirect.github.com/anchore/syft/issues/4010)]
        \\[PR [#&#8203;4490](https://redirect.github.com/anchore/syft/pull/4490) [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n-
        Add support for Kerberos 5 library cataloging \\[Issue [#&#8203;4780](https://redirect.github.com/anchore/syft/issues/4780)]
        \\[PR [#&#8203;4781](https://redirect.github.com/anchore/syft/pull/4781) [@&#8203;nadimz](https://redirect.github.com/nadimz)]\n-
        Include date of scan in results \\[Issue [#&#8203;3910](https://redirect.github.com/anchore/syft/issues/3910)]\n\n#####
        Bug Fixes\n\n- use printf instead of echo to fix ANSI color output \\[PR [#&#8203;4978](https://redirect.github.com/anchore/syft/pull/4978)
        [@&#8203;Jouini-Mohamed-Chaker](https://redirect.github.com/Jouini-Mohamed-Chaker)]\n-
        Strip peer-dep suffix from deno.lock npm keys \\[PR [#&#8203;5055](https://redirect.github.com/anchore/syft/pull/5055)
        [@&#8203;Synvoya](https://redirect.github.com/Synvoya)]\n- Allow more PEP440-compliant
        characters in python versions \\[PR [#&#8203;4964](https://redirect.github.com/anchore/syft/pull/4964)
        [@&#8203;kzantow](https://redirect.github.com/kzantow)]\n- PE case-insensitive
        extensions (Win32/ISO 9660 compatibility) \\[PR [#&#8203;4996](https://redirect.github.com/anchore/syft/pull/4996)
        [@&#8203;activeobd](https://redirect.github.com/activeobd)]\n- Fix panic parsing
        a rockspec comment that ends at EOF \\[PR [#&#8203;5053](https://redirect.github.com/anchore/syft/pull/5053)
        [@&#8203;arpitjain099](https://redirect.github.com/arpitjain099)]\n- Fix Debian
        point release detection \\[PR [#&#8203;4997](https://redirect.github.com/anchore/syft/pull/4997)
        [@&#8203;OsamaSE](https://redirect.github.com/OsamaSE)]\n- Fix `mix.lock`
        git/path deps mislabeled as hex.pm packages with bogus PURLs \\[PR [#&#8203;5041](https://redirect.github.com/anchore/syft/pull/5041)
        [@&#8203;Synvoya](https://redirect.github.com/Synvoya)]\n- npm redis client
        generates no CPE \\[Issue [#&#8203;5011](https://redirect.github.com/anchore/syft/issues/5011)]
        \\[PR [#&#8203;5012](https://redirect.github.com/anchore/syft/pull/5012) [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n-
        Debug Docker images are running as nonroot user \\[Issue [#&#8203;4113](https://redirect.github.com/anchore/syft/issues/4113)]
        \\[PR [#&#8203;4608](https://redirect.github.com/anchore/syft/pull/4608) [@&#8203;spiffcs](https://redirect.github.com/spiffcs)]\n-
        libxml2 gets the wrong cpe vendor \\[Issue [#&#8203;5015](https://redirect.github.com/anchore/syft/issues/5015)]
        \\[PR [#&#8203;5016](https://redirect.github.com/anchore/syft/pull/5016) [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n-
        wrong purl for spring-ldap-core dependency \\[Issue [#&#8203;4030](https://redirect.github.com/anchore/syft/issues/4030)]
        \\[PR [#&#8203;4908](https://redirect.github.com/anchore/syft/pull/4908) [@&#8203;jonasboos](https://redirect.github.com/jonasboos)]\n-
        Swift: CVEs missed by Grype when using Syft-generated SBOMs \u2013 missing
        group field breaks PURL matching \\[Issue [#&#8203;3961](https://redirect.github.com/anchore/syft/issues/3961)]
        \\[PR [#&#8203;4785](https://redirect.github.com/anchore/syft/pull/4785) [@&#8203;SAY-5](https://redirect.github.com/SAY-5)]\n-
        conanfile.txt: dependencies after a comment line in \\[requires] are not detected
        \\[Issue [#&#8203;5017](https://redirect.github.com/anchore/syft/issues/5017)]
        \\[PR [#&#8203;5020](https://redirect.github.com/anchore/syft/pull/5020) [@&#8203;jfjrh2014](https://redirect.github.com/jfjrh2014)]\n-
        dotnet cataloger can't find packages from deps.json in linux elf single-file
        bundles \\[Issue [#&#8203;4514](https://redirect.github.com/anchore/syft/issues/4514)]
        \\[PR [#&#8203;4517](https://redirect.github.com/anchore/syft/pull/4517) [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n-
        Go template sprig date functions not defined \\[Issue [#&#8203;2372](https://redirect.github.com/anchore/syft/issues/2372)]
        \\[PR [#&#8203;4644](https://redirect.github.com/anchore/syft/pull/4644) [@&#8203;sputnik-mac](https://redirect.github.com/sputnik-mac)]\n-
        CycloneDX BOM contains invalid externalReferences URL from unresolved Ruby
        gemspec interpolation (e.g. #{s.name}) \\[Issue [#&#8203;4720](https://redirect.github.com/anchore/syft/issues/4720)]
        \\[PR [#&#8203;4782](https://redirect.github.com/anchore/syft/pull/4782) [@&#8203;SAY-5](https://redirect.github.com/SAY-5)]\n\n#####
        Dependencies\n\n9 dependency changes (8 updated, 1 added).\n\n<details>\n<summary>Updated
        (8 packages)</summary>\n\n- github.com/bmatcuk/doublestar `v1.3.1` \u2192
        `v8.8.8`\n- github.com/klauspost/compress `v1.18.6` \u2192 `v1.19.0`\n- golang.org/x/tools
        `v0.46.0` \u2192 `v0.47.0`\n- modernc.org/cc/v4 `v4.28.2` \u2192 `v4.28.4`\n-
        modernc.org/ccgo/v4 `v4.34.0` \u2192 `v4.34.4`\n- modernc.org/gc/v3 `v3.1.2`
        \u2192 `v3.1.3`\n- modernc.org/libc `v1.72.3` \u2192 `v1.73.4`\n- modernc.org/sqlite
        `v1.51.0` \u2192 `v1.53.0`\n\n</details>\n\n<details>\n<summary>Added (1 package)</summary>\n\n-
        howett.net/plist `v1.0.1`\n\n</details>\n\n**[(Full Changelog)](https://redirect.github.com/anchore/syft/compare/v1.46.0...v1.47.1)**\n\n</details>\n\n---\n\n###
        Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
        At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
        defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
        manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
        conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
        Close this PR and you won't be reminded about this update again.\n\n---\n\n
        - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
        box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
        View the [repository job log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNjUuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI2NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
      change_url: https://github.com/osism/release/pull/2599
      child_jobs: []
      commit_id: f70dace5d76f0020694929312321c1be823dcc5d
      event_id: 98ab62c0-83a4-11f1-838e-b2f1115b1bb3
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/17afdff6934d45bfbac9b2137221f1ca/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/17afdff6934d45bfbac9b2137221f1ca/work/logs
        result_data_file: /var/lib/zuul/builds/17afdff6934d45bfbac9b2137221f1ca/work/results.json
        src_root: /var/lib/zuul/builds/17afdff6934d45bfbac9b2137221f1ca/work/src
        work_root: /var/lib/zuul/builds/17afdff6934d45bfbac9b2137221f1ca/work
      include_vars: []
      items:
      - branch: main
        change: '2599'
        change_message: "chore(deps): update anchore/syft docker tag to v1.48.0\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [anchore/syft](https://redirect.github.com/anchore/syft) | minor | `v1.46.0`
          \u2192 `v1.48.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>anchore/syft
          (anchore/syft)</summary>\n\n### [`v1.48.0`](https://redirect.github.com/anchore/syft/releases/tag/v1.48.0)\n\n[Compare
          Source](https://redirect.github.com/anchore/syft/compare/v1.46.0...v1.48.0)\n\n#####
          Added Features\n\n- emit dependency relationships from mix.lock \\[PR [#&#8203;4985](https://redirect.github.com/anchore/syft/pull/4985)
          [@&#8203;cgreeno](https://redirect.github.com/cgreeno)]\n- add safe tensor
          model type to SBOM output \\[PR [#&#8203;4844](https://redirect.github.com/anchore/syft/pull/4844)
          [@&#8203;spiffcs](https://redirect.github.com/spiffcs)]\n- Capture golang
          binary symbols \\[PR [#&#8203;4988](https://redirect.github.com/anchore/syft/pull/4988)
          [@&#8203;spiffcs](https://redirect.github.com/spiffcs)]\n- Detect Ubuntu
          Pro/ESM extended support \\[PR [#&#8203;5028](https://redirect.github.com/anchore/syft/pull/5028)
          [@&#8203;wagoodman](https://redirect.github.com/wagoodman)]\n- Add scan
          duration timer to Syft \\[Issue [#&#8203;4587](https://redirect.github.com/anchore/syft/issues/4587)]
          \\[PR [#&#8203;4858](https://redirect.github.com/anchore/syft/pull/4858)
          [@&#8203;ChrisJr404](https://redirect.github.com/ChrisJr404)]\n- Support
          for `vcpkg` \\[Issue [#&#8203;2110](https://redirect.github.com/anchore/syft/issues/2110)]
          \\[PR [#&#8203;4081](https://redirect.github.com/anchore/syft/pull/4081)
          [@&#8203;gabetrau](https://redirect.github.com/gabetrau)]\n- Add macOS `.app`
          cataloger \\[Issue [#&#8203;4010](https://redirect.github.com/anchore/syft/issues/4010)]
          \\[PR [#&#8203;4490](https://redirect.github.com/anchore/syft/pull/4490)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- Add support for
          Kerberos 5 library cataloging \\[Issue [#&#8203;4780](https://redirect.github.com/anchore/syft/issues/4780)]
          \\[PR [#&#8203;4781](https://redirect.github.com/anchore/syft/pull/4781)
          [@&#8203;nadimz](https://redirect.github.com/nadimz)]\n- Include date of
          scan in results \\[Issue [#&#8203;3910](https://redirect.github.com/anchore/syft/issues/3910)]\n\n#####
          Bug Fixes\n\n- use printf instead of echo to fix ANSI color output \\[PR
          [#&#8203;4978](https://redirect.github.com/anchore/syft/pull/4978) [@&#8203;Jouini-Mohamed-Chaker](https://redirect.github.com/Jouini-Mohamed-Chaker)]\n-
          Strip peer-dep suffix from deno.lock npm keys \\[PR [#&#8203;5055](https://redirect.github.com/anchore/syft/pull/5055)
          [@&#8203;Synvoya](https://redirect.github.com/Synvoya)]\n- Allow more PEP440-compliant
          characters in python versions \\[PR [#&#8203;4964](https://redirect.github.com/anchore/syft/pull/4964)
          [@&#8203;kzantow](https://redirect.github.com/kzantow)]\n- PE case-insensitive
          extensions (Win32/ISO 9660 compatibility) \\[PR [#&#8203;4996](https://redirect.github.com/anchore/syft/pull/4996)
          [@&#8203;activeobd](https://redirect.github.com/activeobd)]\n- Fix panic
          parsing a rockspec comment that ends at EOF \\[PR [#&#8203;5053](https://redirect.github.com/anchore/syft/pull/5053)
          [@&#8203;arpitjain099](https://redirect.github.com/arpitjain099)]\n- Fix
          Debian point release detection \\[PR [#&#8203;4997](https://redirect.github.com/anchore/syft/pull/4997)
          [@&#8203;OsamaSE](https://redirect.github.com/OsamaSE)]\n- Fix `mix.lock`
          git/path deps mislabeled as hex.pm packages with bogus PURLs \\[PR [#&#8203;5041](https://redirect.github.com/anchore/syft/pull/5041)
          [@&#8203;Synvoya](https://redirect.github.com/Synvoya)]\n- npm redis client
          generates no CPE \\[Issue [#&#8203;5011](https://redirect.github.com/anchore/syft/issues/5011)]
          \\[PR [#&#8203;5012](https://redirect.github.com/anchore/syft/pull/5012)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- Debug Docker
          images are running as nonroot user \\[Issue [#&#8203;4113](https://redirect.github.com/anchore/syft/issues/4113)]
          \\[PR [#&#8203;4608](https://redirect.github.com/anchore/syft/pull/4608)
          [@&#8203;spiffcs](https://redirect.github.com/spiffcs)]\n- libxml2 gets
          the wrong cpe vendor \\[Issue [#&#8203;5015](https://redirect.github.com/anchore/syft/issues/5015)]
          \\[PR [#&#8203;5016](https://redirect.github.com/anchore/syft/pull/5016)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- wrong purl for
          spring-ldap-core dependency \\[Issue [#&#8203;4030](https://redirect.github.com/anchore/syft/issues/4030)]
          \\[PR [#&#8203;4908](https://redirect.github.com/anchore/syft/pull/4908)
          [@&#8203;jonasboos](https://redirect.github.com/jonasboos)]\n- Swift: CVEs
          missed by Grype when using Syft-generated SBOMs \u2013 missing group field
          breaks PURL matching \\[Issue [#&#8203;3961](https://redirect.github.com/anchore/syft/issues/3961)]
          \\[PR [#&#8203;4785](https://redirect.github.com/anchore/syft/pull/4785)
          [@&#8203;SAY-5](https://redirect.github.com/SAY-5)]\n- conanfile.txt: dependencies
          after a comment line in \\[requires] are not detected \\[Issue [#&#8203;5017](https://redirect.github.com/anchore/syft/issues/5017)]
          \\[PR [#&#8203;5020](https://redirect.github.com/anchore/syft/pull/5020)
          [@&#8203;jfjrh2014](https://redirect.github.com/jfjrh2014)]\n- dotnet cataloger
          can't find packages from deps.json in linux elf single-file bundles \\[Issue
          [#&#8203;4514](https://redirect.github.com/anchore/syft/issues/4514)] \\[PR
          [#&#8203;4517](https://redirect.github.com/anchore/syft/pull/4517) [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n-
          Go template sprig date functions not defined \\[Issue [#&#8203;2372](https://redirect.github.com/anchore/syft/issues/2372)]
          \\[PR [#&#8203;4644](https://redirect.github.com/anchore/syft/pull/4644)
          [@&#8203;sputnik-mac](https://redirect.github.com/sputnik-mac)]\n- CycloneDX
          BOM contains invalid externalReferences URL from unresolved Ruby gemspec
          interpolation (e.g. #{s.name}) \\[Issue [#&#8203;4720](https://redirect.github.com/anchore/syft/issues/4720)]
          \\[PR [#&#8203;4782](https://redirect.github.com/anchore/syft/pull/4782)
          [@&#8203;SAY-5](https://redirect.github.com/SAY-5)]\n\n##### Dependencies\n\n9
          dependency changes (8 updated, 1 added).\n\n<details>\n<summary>Updated
          (8 packages)</summary>\n\n- github.com/bmatcuk/doublestar `v1.3.1` \u2192
          `v8.8.8`\n- github.com/klauspost/compress `v1.18.6` \u2192 `v1.19.0`\n-
          golang.org/x/tools `v0.46.0` \u2192 `v0.47.0`\n- modernc.org/cc/v4 `v4.28.2`
          \u2192 `v4.28.4`\n- modernc.org/ccgo/v4 `v4.34.0` \u2192 `v4.34.4`\n- modernc.org/gc/v3
          `v3.1.2` \u2192 `v3.1.3`\n- modernc.org/libc `v1.72.3` \u2192 `v1.73.4`\n-
          modernc.org/sqlite `v1.51.0` \u2192 `v1.53.0`\n\n</details>\n\n<details>\n<summary>Added
          (1 package)</summary>\n\n- howett.net/plist `v1.0.1`\n\n</details>\n\n**[(Full
          Changelog)](https://redirect.github.com/anchore/syft/compare/v1.46.0...v1.47.1)**\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
          manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
          conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
          Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNjUuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI2NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/release/pull/2599
        commit_id: f70dace5d76f0020694929312321c1be823dcc5d
        patchset: f70dace5d76f0020694929312321c1be823dcc5d
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          name: osism/release
          short_name: release
          src_dir: src/github.com/osism/release
        topic: null
      job: flake8
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: f70dace5d76f0020694929312321c1be823dcc5d
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 71b711c422c10c242a8f785dc6d41ed9d12e9cd3
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 242732586e2cba04d04867d3e302888c766bc231
          trusted/project_2/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 1d71e58c93442038e695a5d883d57a603182c7ae
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 1d71e58c93442038e695a5d883d57a603182c7ae
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 71b711c422c10c242a8f785dc6d41ed9d12e9cd3
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 242732586e2cba04d04867d3e302888c766bc231
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/flake8/run.yaml
          roles:
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_0/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_0/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_1/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_1/openinfra-zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_2/zuul-jobs/roles
      post_review: false
      post_timeout: 1800
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/release
        name: osism/release
        short_name: release
        src_dir: src/github.com/osism/release
      projects:
        github.com/osism/release:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          checkout: main
          checkout_description: zuul branch
          commit: 22ab11d1560205961b1b1c2e1792987c06fad3b9
          name: osism/release
          required: false
          short_name: release
          src_dir: src/github.com/osism/release
      ref: refs/pull/2599/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
