{
  "slug": "syft-adds-extended-go-symbol-capture-scope-and-module-patterns-e42586870517",
  "title": "syft adds extended Go symbol-capture scope and module patterns",
  "tools": [
    "syft"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-08-10T14:55:18.000Z",
  "announced_at": "2026-08-10T14:55:18.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When configuring a Syft v1.51.0 SBOM for Grype reachability analysis, set `golang.capture-symbols` to `extended-stdlib` to capture stdlib and modules under `golang.org/x/`. Add `golang.capture-symbols-modules` patterns to widen that selection; they are ignored when capture-symbols is `none`.",
    "examples": [
      "syft scan <image-or-directory> --config <path/to/syft.yaml>",
      "golang:\n  capture-symbols: extended-stdlib\n  capture-symbols-modules:\n    - github.com/klauspost/**"
    ],
    "gotchas": [
      "Version: v1.51.0",
      "golang.capture-symbols: Symbol capture scope; allowed values are `none`, `stdlib`, `extended-stdlib`, and `all`. `extended-stdlib` selects stdlib plus modules under `golang.org/x/`.",
      "golang.capture-symbols-modules: List of Go module path glob patterns to capture in addition to the selected scope; patterns only widen scope and are inert when capture-symbols is `none`. `**` crosses path separators; `*` does not. A trailing major version suffix is ignored unless the pattern spells one out.",
      "`capture-symbols-modules` is unioned with the selected scope and only widens it.",
      "Patterns are standard doublestar globs matched against module paths with trailing major version suffixes removed."
    ]
  },
  "why_it_matters": "Configure Go symbol capture in an SBOM for grype reachability analysis.",
  "before": "Set `golang.capture-symbols` to `none`, `stdlib`, or `all` to select symbol data capture scope.",
  "sources": [
    "https://github.com/anchore/syft/releases/tag/v1.51.0",
    "https://github.com/anchore/syft/pull/5154",
    "https://github.com/anchore/syft/blob/v1.51.0/README.md",
    "https://github.com/anchore/syft/blob/v1.51.0/cmd/syft/internal/options/golang.go"
  ],
  "rank": 0.98027,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v2+judge-v2x3+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "wave1-20261014",
    "verdict_id": "wave1-20261014:wave1-20261014-21a953b1cc4a8e2c-1:gate",
    "evidence_hash": "5bb124757851d732bb55efd2359e958c7e86f03fcf42900db439a96626568a67"
  },
  "review": {
    "draft_hash": "8fcb82b6ba6fa2df882484735d8a8dc01168808ce4e1ab229632412c1646abbb",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "wave1-20261014:gate",
    "reason": "3 of 3 judge runs approved with p_yes >= 0.9 (mean 0.98 >= 0.9; 2 needed) and Jev gave 0.76 (>= 0.6 needed)."
  }
}