Anchore Engine Release Notes - Version 0.9.3

Anchore Engine 0.9.3

Anchore Engine 0.9.3 bug fixes, and improvements. The latest summary can always be found in the Anchore Engine CHANGELOG on github.

Changes of Note

Fixed

  • Fixed - Fixes issue where java artifacts are not being matched against records from GHSA feed - synthesize pom properties contents in syft mapper. Fixes #950
  • Fixed - Updates syft to 0.14.0 to fix missing java elements from image SBOM, for embedded java artifacts combined with malformed pom.properties metadata (see https://github.com/anchore/syft Issue #349)

Additional minor fixes and enhancements

Upgrading