v0.9.0

Changelog

• 2677167 Add commit sha to SBOM metadata
• 909ff61 Add quotes
• 1020a77 Bump dependencies
• e134896 Bump dependencies
• b8c545f Bump github.com/rs/cors
• f200f5c Bump goreleaser version
• 344f91d Merge pull request #44 from edgebitio/rs/patch_archiver
• 60d8c8b Merge pull request #45 from edgebitio/rs/pin-syft
• 8cc191c Merge pull request #47 from edgebitio/ey/bump-cors
• 8a8ec97 Merge pull request #52 from edgebitio/ey/fix-CVE-2024-45310
• c865df4 Merge pull request #53 from edgebitio/ey/bump-deps-2
• 9e3a8e3 Merge pull request #57 from edgebitio/ey/require-component
• e354103 Merge pull request #58 from edgebitio/ey/bump-goreleaser
• 27ea99c Pin Syft to newly released 1.5.0 to pick up replace package logic
• 027f0de Remove unused Syft action on release step
• a6136f6 Replace github.com/mholt/archiver With Anchore Fork This will utilize Anchore's fork of archiver to address GHSA-rhh4-rh7c-7r5v, until the issue is fixed upstream.
• 97adb26 Require --component flag
• 024d23f Update action-download-artifact to fix vuln
• afdc5e7 go: mod tidy
• 4c50387 sboms: retry remote procedure calls