mirror of
https://github.com/anchore/syft.git
synced 2026-10-30 14:02:26 +01:00
Previously, if a Go binary was cataloged with build info indicating that the go compiler version used was "deve", syft would panic on a nil pointer dereference. Instead, skip creating a Go stdlib reference and relationship for such a package. Signed-off-by: Will Murphy <will.murphy@anchore.com>