kpcyrd pushed to branch main at Arch Linux / Packaging / Packages / syft
Commits:
051c4849 by kpcyrd at 2026-02-04T14:26:18+01:00
upgpkg: 1.41.2-3: disable LTO to fix reproducible builds
- - - - -
2 changed files:
- .SRCINFO
- PKGBUILD
Changes:
=====================================
.SRCINFO
=====================================
@@ -1,13 +1,14 @@
pkgbase = syft
pkgdesc = CLI tool and library for generating a Software Bill of
Materials from container images and filesystems
pkgver = 1.41.2
- pkgrel = 2
+ pkgrel = 3
url = https://github.com/anchore/syft
arch = x86_64
license = Apache-2.0
makedepends = git
makedepends = go
depends = glibc
+ options = !lto
source =
syft-1.41.2.tar.gz::https://github.com/anchore/syft/archive/v1.41.2.tar.gz
sha512sums =
81e8b34b1f22738cdfab52a35266129d8f1de7fa6fe8a7ce9342744d5c0bf320f2cf306041ee9d60d43e6cad0e168efbb03ddc77a30d60a867d20d224210781b
b2sums =
a3642ae696e2a65be37b61f3d9094c19e6e63eeaa5f5f00655d285050794d24e3dea15df0f2455d2598e88227b6001fb26ca63a92ed79e79a8e5dbd2f5d892d9
=====================================
PKGBUILD
=====================================
@@ -2,7 +2,7 @@
pkgname=syft
pkgver=1.41.2
-pkgrel=2
+pkgrel=3
pkgdesc="CLI tool and library for generating a Software Bill of Materials from
container images and filesystems"
arch=('x86_64')
url="https://github.com/anchore/syft";
@@ -14,6 +14,7 @@ makedepends=(
'git'
'go'
)
+options=(!lto)
source=("${pkgname}-${pkgver}.tar.gz::https://github.com/anchore/${pkgname}/archive/v${pkgver}.tar.gz";)
sha512sums=('81e8b34b1f22738cdfab52a35266129d8f1de7fa6fe8a7ce9342744d5c0bf320f2cf306041ee9d60d43e6cad0e168efbb03ddc77a30d60a867d20d224210781b')
b2sums=('a3642ae696e2a65be37b61f3d9094c19e6e63eeaa5f5f00655d285050794d24e3dea15df0f2455d2598e88227b6001fb26ca63a92ed79e79a8e5dbd2f5d892d9')
@@ -26,7 +27,6 @@ build() {
export CGO_LDFLAGS="${LDFLAGS}"
export CGO_REQUIRED="1"
- mkdir -p build
go build \
-o build/ \
-buildmode=pie \
View it on GitLab:
https://gitlab.archlinux.org/archlinux/packaging/packages/syft/-/commit/051c4849d91c3a85f807144a623ca15e83a0b1cc
--
View it on GitLab:
https://gitlab.archlinux.org/archlinux/packaging/packages/syft/-/commit/051c4849d91c3a85f807144a623ca15e83a0b1cc
You're receiving this email because of your account on gitlab.archlinux.org.
