syft: 1.23.1 -> 1.24.0

buildGoModule rec {

  pname = "syft";

  version = "1.23.1";

  version = "1.24.0";

  src = fetchFromGitHub {

    owner = "anchore";

    repo = "syft";

    tag = "v${version}";

    hash = "sha256-GSDkSM6mQIBb25ez74Cpdri8Ryl6LJz08bumj37yZBA=";

    hash = "sha256-7Fav9tTcPFpAQnKMXOeD9Ho5rADDwGvLD3f9VzV82NU=";

    # populate values that require us to use git. By doing this in postFetch we

    # can delete .git afterwards and maintain better reproducibility of the src.

    leaveDotGit = true;

  # hash mismatch with darwin

  proxyVendor = true;

  vendorHash = "sha256-1vzN92jcksIu0QklQ73dsC9ng193WCinN0BxOWLLQ7Y=";

  vendorHash = "sha256-+7tqC6I8zFbGVHFulIbeLBdy3br2ifrEEXM5hZZe3/8=";

  nativeBuildInputs = [ installShellFiles ];