# syft is an SBOM generator that intentionally reads package databases
syft: uses-dpkg-database-directly [usr/bin/syft]

# Go links its dependencies statically; the embedded copies are recorded in
# Static-Built-Using, generated by dh_golang from the real build.
syft: embedded-library libzstd [usr/bin/syft]

# Spelling errors come from license texts compiled into the binary by the
# license detection engine; they are not our text to modify.
syft: spelling-error-in-binary * [usr/bin/syft]
