v0.91.0

Added Features

• Add support for CycloneDX 1.5 [#2120 #2123 @spiffcs]
• Add support for containerd as an image source [#201 #1793 @shanedell]
• Support cataloging github workflow & github action usages [#1896 #2140 @wagoodman]

Bug Fixes

• Allow CycloneDX json input with no components [#2127 @ahoz]
• Prevent errors from clobbering terminal [#2161 @kzantow]
• Using syft as a go library to decode a syft json has incomplete data [#2069 #2083 @kzantow]
• SBOMs are not the same on multiple runs of syft [#1944]

Additional Changes

• Switch to stdlib's slices pkg [#2148 @hainenber]
• Remove unneeded arch switch in unit test [#2156 @willmurphyscode]
• Update chronicle to v0.8.0 [#2154 @wagoodman]
• Update to latest stereoscope [#2151 @spiffcs]
• Pin workflow checkout for cpe update-cpe-dictionary-index [#2141 @spiffcs]
• Add dependency information to conan lockfile parser [#2131 @Pro]
• Pin and update all workflow dependencies; add permission scopes [#2138 @spiffcs]
• Enforce race detector [#2122 @willmurphyscode]

(Full Changelog)