anchore / syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Apache License 2.0
5.98k stars 551 forks source link

Only match ldflag version if it matches the main module or targets main.version #3062

Closed LaurentGoderre closed 1 month ago

LaurentGoderre commented 1 month ago

This prevents matching a version that is targeting a different module the the main one.