1.7.0 (2026-10-09)

Features

packages GitHub Action input (#296)

The action now exposes --packages as an input. Set packages: report,sbom to make the SBOM
and the scan see the distribution packages, or packages: image to keep the package records
in the image. Set packages: none to turn the lookup off. Empty keeps the default, report.

Fixes

--packages sbom with nothing to read it now warns (#298)

--packages sbom shows the packages to --sbom and --scan. With neither of them on, the pack
looked the packages up, wrote them nowhere, and said nothing. It now prints a warning and
skips that lookup. The pack still succeeds.