mirror of
https://github.com/anchore/syft.git
synced 2026-10-30 14:02:26 +01:00
A recovered panic while cataloging an archive became an unknown whose reason carried the full goroutine stack, so a crafted archive that panicked a decoder put kilobytes of stack and build paths into the published SBOM. - the reason is now just `panic while cataloging archive: <value>` - the stack is logged at debug, matching `runSubTaskSafely` Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>