Merge pull request #266133 from kashw2/syft

buildGoModule rec {

  pname = "syft";

  version = "0.96.0";

  version = "0.97.1";

  src = fetchFromGitHub {

    owner = "anchore";

    repo = pname;

    rev = "v${version}";

    hash = "sha256-jvX7gUQX6yhk9pV2Rh66Gy6XUQN/XY5jxUYs5RfEL7s=";

    hash = "sha256-2c2Ymf+cATK/E8DS/Z1EvgfWPo2fo4y2zx13MAPAQPg=";

    # populate values that require us to use git. By doing this in postFetch we

    # can delete .git afterwards and maintain better reproducibility of the src.

    leaveDotGit = true;

  };

  # hash mismatch with darwin

  proxyVendor = true;

  vendorHash = "sha256-79m0KQ8sLodWY2LMKNdZxKZbiBBOAv6f8eLOKhrCSdU=";

  vendorHash = "sha256-xtik+sMCcVdG4FsurpTJT0U//hKFyZsNCIpbVY235Bk=";

  nativeBuildInputs = [ installShellFiles ];