Merge pull request #220048 from r-ryantm/auto-update/syft

buildGoModule rec {

  pname = "syft";

  version = "0.73.0";

  version = "0.74.0";

  src = fetchFromGitHub {

    owner = "anchore";

    repo = pname;

    rev = "v${version}";

    hash = "sha256-FJGdp1scqzyeCWKIyTVNkaGNb4rbFLWvHDVWV4V5iBw=";

    hash = "sha256-AJAm+sgB3fyKYfyVTJsZVx5n7cnWVX5bFm27b1q+6sQ=";

    # populate values that require us to use git. By doing this in postFetch we

    # can delete .git afterwards and maintain better reproducibility of the src.

    leaveDotGit = true;

  };

  # hash mismatch with darwin

  proxyVendor = true;

  vendorHash = "sha256-/OwLARY5skfBfr9eJpP6YJuZrtghSGp4fZ7GfzoOiq8=";

  vendorHash = "sha256-iKcz+HFcek07GuK7xTeAKS/QRBt56oDMHy/mzlR8xDo=";

  nativeBuildInputs = [ installShellFiles ];