syft: 1.42.4 -> 1.43.0 (#512488)

buildGoModule (finalAttrs: {

  pname = "syft";

  version = "1.42.4";

  version = "1.43.0";

  src = fetchFromGitHub {

    owner = "anchore";

    repo = "syft";

    tag = "v${finalAttrs.version}";

    hash = "sha256-RIPdH3XT4jruT2a3cU0GsR2PeExVuVAHeN2Za1E7Gyg=";

    hash = "sha256-JWcJn8NU9GfTJDKFedop5UuLq/SqFFdM26F7yhkcQyM=";

    # populate values that require us to use git. By doing this in postFetch we

    # can delete .git afterwards and maintain better reproducibility of the src.

    leaveDotGit = true;

  # hash mismatch with darwin

  proxyVendor = true;

  vendorHash = "sha256-4S9U4nZxCckp+kbRRsSLCIbLJ9E98X1ELtkAYCMAG0k=";

  vendorHash = "sha256-k3+fbwMJnz6bsI9pHbExgww4QYQlYslF8iZjM+Ik/4o=";

  nativeBuildInputs = [ installShellFiles ];