syft: 1.8.0 -> 1.9.0

buildGoModule rec {

  pname = "syft";

  version = "1.8.0";

  version = "1.9.0";

  src = fetchFromGitHub {

    owner = "anchore";

    repo = "syft";

    rev = "refs/tags/v${version}";

    hash = "sha256-S61O/JxVu60GS/T9jVBuebn+EFBwB5jiSEkKV/h/S+s=";

    hash = "sha256-OO8tGjfp2iQvR800L6ykf36A4JEx/ImKirKP74rcvJc=";

    # populate values that require us to use git. By doing this in postFetch we

    # can delete .git afterwards and maintain better reproducibility of the src.

    leaveDotGit = true;

  # hash mismatch with darwin

  proxyVendor = true;

  vendorHash = "sha256-WSDbTI0U3Vqkfy8fxuqq9G5uBnBQ3421vyn6RriQx/U=";

  vendorHash = "sha256-xf7ES9LZpVbvjiSTZP2stu0WpABlKqAr1OT3lV4mvVA=";

  nativeBuildInputs = [ installShellFiles ];