v0.3.1

Changelog

Features

• 83fd4a1: feat(manifest): read installed package metadata, so a deployed scan has versions (@Roro1727)
• ef68dfa: feat(manifest): read lockfiles, and stop reporting a range as a version (@Roro1727)

---

Verify the checksums signature (keyless cosign):

cosign verify-blob \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp 'https://github.com/airomhq/airom' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  checksums.txt