deps: update module github.com/anchore/syft to v0.41.4

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github.com/anchore/syft	require	minor	v0.39.3 -> v0.41.4

---

Release Notes

anchore/syft

v0.41.4

Compare Source

Changelog

v0.41.4 (2022-03-11)

Full Changelog

Added Features

• Support Yarn v3 [PR #​868] [cipher-ardvark]
• Update to CycloneDX 1.4 [Issue #​744] [samj1912]

Bug Fixes

• Correct CycloneDX distro decoding, test relationships [PR #​745] [kzantow]
• RPM Epoch should be optional in the json schema [PR #​880] [wagoodman]
• syft packages fails to catalog golang binary's modules for binary built with vendored modules [Issue #​871] [fg-j]

v0.41.3

Compare Source

v0.41.2

Compare Source

v0.41.1

Compare Source

Changelog

v0.41.1 (2022-03-08)

Full Changelog

Bug Fixes

• Fix file creation for output options [PR #​875] [wagoodman]

v0.41.0

Compare Source

Changelog

v0.41.0 (2022-03-07)

Full Changelog

Added Features

• Add platform selection [PR #​866] [wagoodman]

Bug Fixes

• Include root path in directory resolve index [PR #​869] [wagoodman]

v0.40.1

Compare Source

Changelog

v0.40.1 (2022-03-04)

Full Changelog

Bug Fixes

• Correct SPDX-JSON checksum algorithm [PR #​863] [kzantow]

v0.40.0

Compare Source

Changelog

v0.40.0 (2022-03-02)

Full Changelog

Added Features

• Add support for multiple CPEs in CycloneDX [Issue #​818]
• Use syft property namespace in CycloneDX [Issue #​842]

Bug Fixes

• Wrong digest used for in-toto statement subject when using Docker daemon source [Issue #​855]

---

Configuration

📅 Schedule: "every weekend" in timezone Europe/Berlin.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.

[renovate]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: docker run --rm --name=renovate_go --label=renovate_child -v "/mnt/renovate/gh/ckotzbauer/vulnerability-operator":"/mnt/renovate/gh/ckotzbauer/vulnerability-operator" -v "/tmp/renovate-cache":"/tmp/renovate-cache" -e GOPATH -e GOPROXY -e GOFLAGS -e CGO_ENABLED -e GIT_CONFIG_KEY_0 -e GIT_CONFIG_VALUE_0 -e GIT_CONFIG_KEY_1 -e GIT_CONFIG_VALUE_1 -e GIT_CONFIG_KEY_2 -e GIT_CONFIG_VALUE_2 -e GIT_CONFIG_COUNT -e GIT_CONFIG_KEY_3 -e GIT_CONFIG_VALUE_3 -e GIT_CONFIG_KEY_4 -e GIT_CONFIG_VALUE_4 -e GIT_CONFIG_KEY_5 -e GIT_CONFIG_VALUE_5 -w "/mnt/renovate/gh/ckotzbauer/vulnerability-operator" docker.io/renovate/go:1.17.8 bash -l -c "go get -d -t ./..."
go: downloading github.com/prometheus/client_golang v1.12.1
go: downloading github.com/sirupsen/logrus v1.8.1
go: downloading github.com/spf13/cobra v1.3.0
go: downloading github.com/spf13/viper v1.10.1
go: downloading github.com/spf13/pflag v1.0.5
go: downloading github.com/robfig/cron v1.2.0
go: downloading github.com/anchore/grype v0.33.1
go: downloading github.com/anchore/syft v0.41.4
go: downloading gopkg.in/yaml.v2 v2.4.0
go: downloading k8s.io/api v0.23.4
go: downloading k8s.io/apimachinery v0.23.4
go: downloading k8s.io/client-go v0.23.4
go: downloading github.com/go-git/go-git/v5 v5.4.2
go: downloading github.com/prometheus/client_model v0.2.0
go: downloading github.com/prometheus/common v0.32.1
go: downloading golang.org/x/sys v0.0.0-20220209214540-3681064d5158
go: downloading github.com/inconshreveable/mousetrap v1.0.0
go: downloading github.com/fsnotify/fsnotify v1.5.1
go: downloading github.com/magiconair/properties v1.8.5
go: downloading github.com/mitchellh/mapstructure v1.4.3
go: downloading github.com/spf13/afero v1.8.1
go: downloading github.com/spf13/cast v1.4.1
go: downloading github.com/spf13/jwalterweatherman v1.1.0
go: downloading github.com/subosito/gotenv v1.2.0
go: downloading gopkg.in/ini.v1 v1.66.4
go: downloading github.com/anchore/stereoscope v0.0.0-20220307154759-8a5a70c227d3
go: downloading github.com/wagoodman/go-partybus v0.0.0-20210627031916-db1f5573bbc5
go: downloading github.com/facebookincubator/nvdtools v0.1.4
go: downloading github.com/hashicorp/go-cleanhttp v0.5.2
go: downloading github.com/wagoodman/go-progress v0.0.0-20200807221327-51d465df1451
go: downloading github.com/anchore/packageurl-go v0.0.0-20210922164639-b3fa992ebd29
go: downloading github.com/bmatcuk/doublestar/v2 v2.0.4
go: downloading github.com/mitchellh/hashstructure/v2 v2.0.2
go: downloading github.com/scylladb/go-set v1.0.2
go: downloading github.com/gabriel-vasile/mimetype v1.4.0
go: downloading github.com/mitchellh/go-homedir v1.1.0
go: downloading github.com/hashicorp/go-multierror v1.1.1
go: downloading github.com/gogo/protobuf v1.3.2
go: downloading github.com/google/gofuzz v1.2.0
go: downloading github.com/imdario/mergo v0.3.12
go: downloading golang.org/x/term v0.0.0-20210927222741-03fcf44c2211
go: downloading k8s.io/klog/v2 v2.40.1
go: downloading github.com/ProtonMail/go-crypto v0.0.0-20210428141323-04723f9f07d7
go: downloading github.com/go-git/go-billy/v5 v5.3.1
go: downloading github.com/sergi/go-diff v1.2.0
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.1.2
go: downloading github.com/golang/protobuf v1.5.2
go: downloading github.com/prometheus/procfs v0.7.3
go: downloading google.golang.org/protobuf v1.27.1
go: downloading github.com/matttproud/golang_protobuf_extensions v1.0.2-0.20181231171920-c182affec369
go: downloading golang.org/x/text v0.3.7
go: downloading github.com/hashicorp/hcl v1.0.0
go: downloading github.com/pelletier/go-toml v1.9.4
go: downloading github.com/containerd/containerd v1.6.1
go: downloading github.com/google/go-containerregistry v0.8.1-0.20220209165246-a44adc326839
go: downloading github.com/pkg/errors v0.9.1
go: downloading github.com/acobaugh/osrelease v0.1.0
go: downloading github.com/google/go-cmp v0.5.7
go: downloading github.com/bmatcuk/doublestar/v4 v4.0.2
go: downloading github.com/mholt/archiver/v3 v3.5.1
go: downloading github.com/alicebob/sqlittle v1.4.0
go: downloading github.com/hashicorp/go-version v1.4.0
go: downloading github.com/hashicorp/go-getter v1.5.9
go: downloading github.com/jinzhu/copier v0.3.2
go: downloading github.com/anchore/go-version v1.2.2-0.20210903204242-51efa5b487c4
go: downloading github.com/knqyf263/go-apk-version v0.0.0-20200609155635-041fdbb8563f
go: downloading github.com/knqyf263/go-deb-version v0.0.0-20190517075300-09fca494f03d
go: downloading github.com/dustin/go-humanize v1.0.0
go: downloading golang.org/x/mod v0.6.0-dev.0.20211013180041-c96bc1413d57
go: downloading github.com/vifraa/gopom v0.1.0
go: downloading golang.org/x/net v0.0.0-20220127200216-cd36cc0744dd
go: downloading github.com/anchore/go-rpmdb v0.0.0-20210914181456-a9c52348da63
go: downloading github.com/hashicorp/errwrap v1.1.0
go: downloading gopkg.in/inf.v0 v0.9.1
go: downloading sigs.k8s.io/structured-merge-diff/v4 v4.2.1
go: downloading github.com/googleapis/gnostic v0.5.5
go: downloading k8s.io/utils v0.0.0-20220127004650-9b3446523e65
go: downloading golang.org/x/time v0.0.0-20211116232009-f0f3c7e86c11
go: downloading github.com/go-logr/logr v1.2.2
go: downloading golang.org/x/crypto v0.0.0-20220213190939-1e6e3497d506
go: downloading github.com/emirpasic/gods v1.12.0
go: downloading github.com/acomagu/bufpipe v1.0.3
go: downloading github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99
go: downloading github.com/docker/cli v20.10.12+incompatible
go: downloading github.com/docker/docker v20.10.12+incompatible
go: downloading google.golang.org/grpc v1.44.0
go: downloading github.com/andybalholm/brotli v1.0.4
go: downloading github.com/dsnet/compress v0.0.2-0.20210315054119-f66993602bf5
go: downloading github.com/golang/snappy v0.0.4
go: downloading github.com/klauspost/compress v1.14.2
go: downloading github.com/klauspost/pgzip v1.2.5
go: downloading github.com/nwaples/rardecode v1.1.0
go: downloading github.com/pierrec/lz4/v4 v4.1.2
go: downloading github.com/ulikunitz/xz v0.5.10
go: downloading github.com/xi2/xz v0.0.0-20171230120015-48954b6210f8
go: downloading cloud.google.com/go/storage v1.21.0
go: downloading cloud.google.com/go v0.100.2
go: downloading github.com/aws/aws-sdk-go v1.43.0
go: downloading github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d
go: downloading github.com/hashicorp/go-safetemp v1.0.0
go: downloading github.com/mitchellh/go-testing-interface v1.14.1
go: downloading google.golang.org/api v0.70.0
go: downloading github.com/CycloneDX/cyclonedx-go v0.5.0
go: downloading github.com/spdx/tools-golang v0.2.0
go: downloading github.com/olekukonko/tablewriter v0.0.5
go: downloading golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1
go: downloading sigs.k8s.io/json v0.0.0-20211208200746-9f7c6b3444d2
go: downloading github.com/json-iterator/go v1.1.12
go: downloading gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b
go: downloading github.com/davecgh/go-spew v1.1.1
go: downloading golang.org/x/oauth2 v0.0.0-20211104180415-d3ed0bb246c8
go: downloading sigs.k8s.io/yaml v1.3.0
go: downloading github.com/go-git/gcfg v1.5.0
go: downloading github.com/kevinburke/ssh_config v0.0.0-20201106050909-4977a11b4351
go: downloading github.com/xanzy/ssh-agent v0.3.0
go: downloading github.com/docker/distribution v2.8.0+incompatible
go: downloading github.com/docker/go-connections v0.4.0
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading github.com/opencontainers/image-spec v1.0.3-0.20220114050600-8b9d41f48198
go: downloading google.golang.org/genproto v0.0.0-20220218161850-94dd64e39d7c
go: downloading golang.org/x/exp v0.0.0-20220209042442-160e291fcf24
go: downloading cloud.google.com/go/compute v1.3.0
go: downloading cloud.google.com/go/iam v0.1.1
go: downloading github.com/googleapis/gax-go/v2 v2.1.1
go: downloading github.com/google/uuid v1.3.0
go: downloading github.com/mattn/go-runewidth v0.0.13
go: downloading github.com/go-restruct/restruct v1.2.0-alpha
go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
go: downloading github.com/modern-go/reflect2 v1.0.2
go: downloading k8s.io/kube-openapi v0.0.0-20220124234850-424119656bbf
go: downloading gopkg.in/warnings.v0 v0.1.2
go: downloading github.com/Microsoft/go-winio v0.5.1
go: downloading github.com/docker/go-units v0.4.0
go: downloading github.com/docker/docker-credential-helpers v0.6.4
go: downloading github.com/containerd/stargz-snapshotter/estargz v0.10.1
go: downloading golang.org/x/sync v0.0.0-20210220032951-036812b2e83c
go: downloading go.opencensus.io v0.23.0
go: downloading google.golang.org/appengine v1.6.7
go: downloading github.com/jmespath/go-jmespath v0.4.0
go: downloading github.com/rivo/uniseg v0.2.0
go: downloading github.com/vbatts/tar-split v0.11.2
go: downloading github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da
github.com/ckotzbauer/vulnerability-operator/internal/vuln/grype imports
	github.com/anchore/grype/grype/pkg imports
	github.com/anchore/syft/syft/format: cannot find module providing package github.com/anchore/syft/syft/format