From 57466b7f3ddf60edfafcd11b13e3872d52bda09f Mon Sep 17 00:00:00 2001
From: Rui Lopes <rgl@ruilopes.com>
Date: Fri, 4 Sep 2026 07:34:04 +0000
Subject: [PATCH] install syft 1.51.1

---
 Vagrantfile                 |  1 +
 provision/provision-syft.sh | 13 +++++++++++++
 2 files changed, 14 insertions(+)
 create mode 100644 provision/provision-syft.sh

diff --git a/Vagrantfile b/Vagrantfile
index c724ec6..41e963b 100644
--- a/Vagrantfile
+++ b/Vagrantfile
@@ -30,6 +30,7 @@ Vagrant.configure(2) do |config|
     config.vm.provision :shell, path: 'provision/provision-oras.sh'
     config.vm.provision :shell, path: 'provision/provision-regctl.sh'
     config.vm.provision :shell, path: 'provision/provision-crane.sh'
+    config.vm.provision :shell, path: 'provision/provision-syft.sh'
     config.vm.provision :shell, path: 'provision/use-oci-repository.sh'
     config.vm.provision :shell, path: 'provision/use-docker-repository.sh'
     config.vm.provision :shell, path: 'provision/use-raw-repository.sh'
diff --git a/provision/provision-syft.sh b/provision/provision-syft.sh
new file mode 100644
index 0000000..f49b1f5
--- /dev/null
+++ b/provision/provision-syft.sh
@@ -0,0 +1,13 @@
+#!/bin/bash
+set -euxo pipefail
+
+# see https://github.com/anchore/syft/releases
+# renovate: datasource=github-releases depName=anchore/syft
+version='1.51.1'
+
+# download and install.
+syft_url="https://github.com/anchore/syft/releases/download/v${version}/syft_${version}_linux_amd64.tar.gz"
+t="$(mktemp -q -d --suffix=.syft)"
+wget -qO- "$syft_url" | tar xzf - -C "$t" syft
+install -m 755 "$t/syft" /usr/local/bin/
+rm -rf "$t"