Merge pull request #315521 from r-ryantm/auto-update/syft

buildGoModule rec {

  pname = "syft";

  version = "1.4.1";

  version = "1.5.0";

  src = fetchFromGitHub {

    owner = "anchore";

    repo = "syft";

    rev = "refs/tags/v${version}";

    hash = "sha256-fFJcRNqXhhdxsxQkP5S8xSeeUOa+KbS9CkUs1sbNuOg=";

    hash = "sha256-sBV2/2AuKIMgU0oP0p2CukCMYQBSs623vV6BZBTWYqg=";

    # populate values that require us to use git. By doing this in postFetch we

    # can delete .git afterwards and maintain better reproducibility of the src.

    leaveDotGit = true;

  # hash mismatch with darwin

  proxyVendor = true;

  vendorHash = "sha256-vuKvQjWMFHtTjTb7Sg/jXvzpR2IxrHaWyfibTQdpSd4=";

  vendorHash = "sha256-b7iDqobrXbXy1SlyDuHDoSYdbQg3WCcHS0SAVj929qw=";

  nativeBuildInputs = [ installShellFiles ];