syft: 1.34.2 -> 1.36.0 (#456228)

buildGoModule rec {

  pname = "syft";

  version = "1.34.2";

  version = "1.36.0";

  src = fetchFromGitHub {

    owner = "anchore";

    repo = "syft";

    tag = "v${version}";

    hash = "sha256-1RdJpjUVenmfx6dIme97f1N4zAWFt5Z25IfIjZLIAPI=";

    hash = "sha256-JSoKidueNwCI4Fbqs5K4RxfObJlet5FV6JgEWuLqd08=";

    # populate values that require us to use git. By doing this in postFetch we

    # can delete .git afterwards and maintain better reproducibility of the src.

    leaveDotGit = true;

  # hash mismatch with darwin

  proxyVendor = true;

  vendorHash = "sha256-r1P3dWNiVLDFLJ5IM/VHdMTDS/Yh+pb8VODxEnmxmks=";

  vendorHash = "sha256-dKT2bEeIG3tndj5UuJO2g8gnVGM9AfB5ebu3CfWDhRg=";

  nativeBuildInputs = [ installShellFiles ];