From 5ca9142507b7ce27a9a8bf612032ef134c732357 Mon Sep 17 00:00:00 2001
From: Krzesimir Nowak <knowak@microsoft.com>
Date: Wed, 2 Apr 2025 16:06:39 +0200
Subject: [PATCH] build_library/build_image_util.sh: Use scan instead of
 packages in syft

The `packages` command is deprecated in favor of `scan`.
---
 build_library/build_image_util.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build_library/build_image_util.sh b/build_library/build_image_util.sh
index 225e0c864c..6d7dbfc165 100755
--- a/build_library/build_image_util.sh
+++ b/build_library/build_image_util.sh
@@ -277,7 +277,7 @@ write_packages() {
 # Generate an SPDX SBOM using syft
 write_sbom() {
     info "Writing ${2##*/}"
-    sudo syft packages "${1}" -o spdx-json="$2"
+    sudo syft scan "${1}" -o spdx-json="$2"
 }
 
 # Get metadata $key for package $pkg installed under $prefix