11 files changed, 278 insertions, 0 deletions
diff --git a/app-containers/Manifest.gz b/app-containers/Manifest.gz
index 1017b09d88a6..2144fef61cec 100644
--- a/app-containers/Manifest.gz
+++ b/app-containers/Manifest.gz
diff --git a/app-containers/containerd/Manifest b/app-containers/containerd/Manifest
index c97f8b266403..5adf33067286 100644
--- a/app-containers/containerd/Manifest
+++ b/app-containers/containerd/Manifest
@@ -1,5 +1,7 @@
 AUX containerd.confd 124 BLAKE2B 25f72941a47374fa0de3a2dce3d8ca57420f013a0d7527e59697499490ed964b7606819c6d67b9eee1ac6691fa52a65750446d8e46ed9af708d946c24e86704b SHA512 66d891b0d2a541fee2017382ccbea6ea3f93d94c4ff15e1d8626ed84d3d7c0231b0939b2473804d41ac3ad2714267255347d1c671e1d99952d484a8b555948be
 AUX containerd.initd 794 BLAKE2B 88a1976615e4e9d67c10ed3748aadd74ae13ef4cf004bb5b5d45216275715e3acffa8c0c98309d81298795ac007bde02d2f3afd466c7c54e58012a12f156198f SHA512 f31b088e988beb84ef029992255018561417c0e92803dffe35ec481515e1be79ba4611cc139bb5000b0ac79a437f1a6dec3516d6f9580d4b384f1e0f092d8370
 DIST containerd-1.7.15.tar.gz 10071827 BLAKE2B 91de9b7d777d53ecdab4af5bbb0d4ccbe755e4cf0fb7bc99a7bb15c66e0e11ad30aa2af685e0e8b0df80dbeef451704fa056a04b460d92adceebd290977febfc SHA512 84a94c7658a431cfd7a5321ac262d966f4291337ddff14211951b0d2025cd3af25a48175794d2b3a630ffc25ba03047579163546a4758a2fb5d1898cd233854f
+DIST containerd-1.7.19.tar.gz 10157428 BLAKE2B 3f51d63d4280a11ffe308c3e65df2fefdd91f543169501cf361bb8c6d5085b6b606cc3425508246ce872c86a475e2d195dd2473fee89a47548cfdfbd810307c2 SHA512 cb58bf5148381f9f0eba096e159592f294f887c5b17f8aaf6de8fed80c515abf4f08c849bbbd266dd85ede09fe709bf7d15a61a749f1136456329c47508dbe34
 EBUILD containerd-1.7.15.ebuild 1976 BLAKE2B 038a302335d730a6b0c8b6caeb0672beabd7ef48d2a24ec3a317be6d15b41e00551cd95594d575b68fcec6f28757980f91ffbe41cb975bc220168e4963cacf48 SHA512 1fde07b64582f154e76728dd307b4fff449c368ab50c92f68750540ed4805aa383edf400aed1ea8fdc2e52f9a10b61efeddad9ed8f2412b205dfc443c53e771d
+EBUILD containerd-1.7.19.ebuild 1979 BLAKE2B 03d3bf66fc47d66746d96b00d83fc52912beff1e286bb7bbaefddcbeb2f6e6279cf0a51ac4d55d56be80dccc9b62183052e951f5f03e7584cfcb1f2172b72c82 SHA512 a4100422feedc666778ec6e284c1cb9f84704305b281c76ed2a9c012f92cbfa598d2ffac62d1fac57a9280f9d50606b6207e7bf9473d607e9bb58d894e904620
 MISC metadata.xml 981 BLAKE2B 78f44dd46331f9159931ff289a5adfdc177cb5e0c1d12cf717fad4f227b15ae40f479f40554dc4855009342cb7d699aaa543a0fbcc962789fe100a1cc9b350c5 SHA512 a171a3fcd67d8b410148d3e99477ea69be7e84ba2a2d24739343bfde29b88f8f799530c3b1107829ebd52eb847b4f5c25e4d4701ea9a2bc196c761b0768906d1
diff --git a/app-containers/containerd/containerd-1.7.19.ebuild b/app-containers/containerd/containerd-1.7.19.ebuild
new file mode 100644
index 000000000000..964617a43951
--- /dev/null
+++ b/app-containers/containerd/containerd-1.7.19.ebuild
@@ -0,0 +1,86 @@
+# Copyright 2022-2024 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+inherit go-module systemd
+GIT_REVISION=2bf793ef6dc9a18e00cb12efb64355c2c9d5eb41
+
+DESCRIPTION="A daemon to control runC"
+HOMEPAGE="https://containerd.io/"
+SRC_URI="https://github.com/containerd/containerd/archive/v${PV}.tar.gz -> ${P}.tar.gz"
+
+LICENSE="Apache-2.0"
+SLOT="0"
+KEYWORDS="~amd64 ~arm ~arm64 ~ppc64 ~riscv ~x86"
+IUSE="apparmor btrfs device-mapper +cri hardened +seccomp selinux test"
+
+DEPEND="
+	btrfs? ( sys-fs/btrfs-progs )
+	seccomp? ( sys-libs/libseccomp )
+"
+
+# recommended version of runc is found in script/setup/runc-version
+RDEPEND="
+	${DEPEND}
+	~app-containers/runc-1.1.13[apparmor?,seccomp?]
+"
+
+BDEPEND="
+	dev-go/go-md2man
+	virtual/pkgconfig
+"
+
+# tests require root or docker
+RESTRICT+="test"
+
+src_prepare() {
+	default
+	sed -i \
+		-e "s/-s -w//" \
+		-e "s/-mod=readonly//" \
+		Makefile || die
+	sed -i \
+		-e "s:/usr/local:/usr:" \
+		containerd.service || die
+}
+
+src_compile() {
+	local options=(
+		$(usev apparmor)
+		$(usex btrfs "" "no_btrfs")
+		$(usex cri "" "no_cri")
+		$(usex device-mapper "" "no_devmapper")
+		$(usev seccomp)
+		$(usev selinux)
+	)
+
+	myemakeargs=(
+		BUILDTAGS="${options[*]}"
+		LDFLAGS="$(usex hardened '-extldflags -fno-PIC' '')"
+		REVISION="${GIT_REVISION}"
+		VERSION=v${PV}
+	)
+
+	# race condition in man target https://bugs.gentoo.org/765100
+	# we need to explicitly specify GOFLAGS for "go run" to use vendor source
+	emake "${myemakeargs[@]}" man -j1 #nowarn
+	emake "${myemakeargs[@]}" all
+
+}
+
+src_install() {
+	rm "${D}"/bin/gen-manpages
+	dobin bin/*
+	doman man/*
+	newconfd "${FILESDIR}"/${PN}.confd "${PN}"
+	newinitd "${FILESDIR}"/${PN}.initd "${PN}"
+	systemd_dounit containerd.service
+	keepdir /var/lib/containerd
+
+	# we already installed manpages, remove markdown source
+	# before installing docs directory
+	rm -r docs/man || die
+
+	local DOCS=( ADOPTERS.md README.md RELEASES.md ROADMAP.md SCOPE.md docs/. )
+	einstalldocs
+}
diff --git a/app-containers/cosign/Manifest b/app-containers/cosign/Manifest
index 00fba9fbab97..005d56f8fd9a 100644
--- a/app-containers/cosign/Manifest
+++ b/app-containers/cosign/Manifest
@@ -8,9 +8,12 @@ DIST cosign-2.2.1-deps.tar.xz 487130076 BLAKE2B a0adbfc4d6230f4ba1013dfc28638752
 DIST cosign-2.2.1.tar.gz 853562 BLAKE2B 40894d00d6071206221010337cb517ee9559518764a0d991df3363cb4dc381a0af4cd31e60c0c1fc6cffce6086af08c908ccf503893356f224f95b1d4085b195 SHA512 84f2308bbb1968eaf6d0d95e2dcb8efa2c42cd2599298b37d576e5e87f0cf6c1153c330b034908c0c7557953e0a7d964eaa4a8768f7dc35900f5f427d8fe7713
 DIST cosign-2.2.3-deps.tar.xz 429760040 BLAKE2B 47ee9a4f6305a670e1818ce74a9da351fc763d4196334d738ab48b9dcba06f4be43ce2ba77dc879aae59ada2fa2ea66168a223c9da1029e02e140590dd1733a5 SHA512 481f8593b80d91996f2b2d4de10acad8bf1c5db3cf099a9683fd7da307c1142c870166a9222e58f9449a060248c94fecf35343dccc07d5cbf2acbdc00c0aef29
 DIST cosign-2.2.3.tar.gz 845096 BLAKE2B 2017cc1716899640cbfc10ce093280a1ee4789eb1e8a8077978ebe4efe38075efa73ccb1abecb41eaa64dc16e652dbb709be7f195a6542284d86b2d9fb5128f3 SHA512 fc488c80dab3d05e0eca714c6107fada01dfddc2b68747676665d20a3f229224bbe36bfc60625c581c2e80dd10ad1421e142cf7ef6e24eba0894a708f2d10f06
+DIST cosign-2.2.4-deps.tar.xz 153098164 BLAKE2B 6e900386c307fc5bc19057ab62d87eb6ff597916d3cabf14372ce8cd4b39c0fd11ec787fcb96d3db297c7907584617307ab3a87b2e797de56ef6dee4cff3f50b SHA512 d0873fd15819c9c580a8f70a01859ac8e166ba79f9702fe757d95b482ee92914c66b13b9abe3093f79b9657612d9c7da8ce662aca7bc680ff533c7fcb1848e30
+DIST cosign-2.2.4.tar.gz 840586 BLAKE2B 22522fc70ff6b01957af2e294b7fdad740d55cc9710f9023246855dd9383be0688934f27e5b32cde3383cdfe3c02cd2de5547a515a14c1442ac85afc9e566b8f SHA512 3a2e2e7ea3964428bc7c4adb9475fbb730cbe2b7dfa7a5eb5cf350d88a4f3a9aef64f00574c7f38bf0074cb3e386cd26e6cfe4558ce5989ea557b654aa82ef71
 EBUILD cosign-2.0.0.ebuild 631 BLAKE2B 40b294cccc474a548eac995db144aae97d419e5c5f4b57bdd311c0bdcad6c40916f9cfec0d96d3dec912066a8a4fe7c9273d0bbb653f60bb932e802d86fb7a54 SHA512 a8de9cd47b5193c6c8776295988632cbb387859e1f78f316b2c8a1ccc00a89186a8e6f8be6c1342659cc98febac6b02557e006cd43818d0ffe058d1951547958
 EBUILD cosign-2.0.1.ebuild 632 BLAKE2B 6cf8e2d703b8baeb986215da84d6e40a801d8afaf67be5d6634e558c4cfa9d8e00f5494af67a0f9836ef9b01d830629c82b64b5b85998a640d0df0d6451f7830 SHA512 361dd89d2febb10f1d7ed6e27dabf4b59277e0f9bedf5d2e234a617c26c2ee238f5c74ab27f1eeca396faeee57a42b1adae9c21b03b89d2db56ba9530d656d6b
 EBUILD cosign-2.2.0.ebuild 632 BLAKE2B a42d41a2091825560e6bc1d419af507eda0faf56c32d067c639fa03247068722e4cb89598186e74d52605703f752732cece9f75b0f90625650284da2c54ecc9d SHA512 4a2471032ae8fa67b58875050f9aad0c702d2fcba15e621cd944f03e6566e2722fe346192e35a7cc743935813875d321ed28c5561cc2b4773a620dc80e6cfe98
 EBUILD cosign-2.2.1.ebuild 704 BLAKE2B 9f636d0efeda489f858b8fb7624c0b7ba4e310ea805ee3b091d470376785ca87fef91ed7b42c796b62c6ff6e3a2454edb23a6ee8bb17adaa97b0db624c55b34e SHA512 f7a2ebfcceaa0f4aa4ce16ec9f9270c784aa8892a32f0b81cbd71918eba7f02e9e0af08743c32264cb6d1f7278ba0cfb2e91e187347f7881bd644f6a0a5b27ba
 EBUILD cosign-2.2.3.ebuild 704 BLAKE2B 529125eb4419229c76198932fb9639bbc6252188ac0a2317b247c6fba7d8a4e618c5a230654032c557ef7324b62cc8278583774c92d5d99e296123f2abb2d4f8 SHA512 0336d9f3ef4b096878d1ed54dc4a6f95d42d6fdbc4b9193d3957b2673c45a727aa4c0b2ddadc7ee7741f50c7cb341fdbf9368c4ec4d5f16dc9f211b11f321adb
+EBUILD cosign-2.2.4.ebuild 704 BLAKE2B 8a52b259f6afaac8094fb925a1c778bcc06af05a87962b101fc9ed75e95a2d26d4578a9b149bc2c988a1617bfddbb783a78b34b0b1cfae55534ae43a9b6dd558 SHA512 789cfd37feb11ac527de936d7175a5b0bf418a05c8757ca446ec26e5d38e97e3b4a554c25bb47da4bc890acc5d282112be4aee3936f903dff9d8e139edf094cc
 MISC metadata.xml 249 BLAKE2B 08603bf9d754b59bae12620988552abc7f76b87a1390d02038789eba034c22412a3593d10f443794a5171ff3905c2b5c822368b2eb9f53a528097b7b6c80ffe9 SHA512 338d72efbd040697be98aad4229b81c9694eb27ecbc39f3a18332f4cc766a46b4a0a92f32612203259bf58f5838d0aff7f0b1abec7766f6cd2394c73f7f0b251
diff --git a/app-containers/cosign/cosign-2.2.4.ebuild b/app-containers/cosign/cosign-2.2.4.ebuild
new file mode 100644
index 000000000000..97ef9d95434b
--- /dev/null
+++ b/app-containers/cosign/cosign-2.2.4.ebuild
@@ -0,0 +1,32 @@
+# Copyright 2022-2024 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+inherit go-module
+GIT_HASH=fb651b4ddd8176bd81756fca2d988dd8611f514d
+SOURCE_DATE_EPOCH=1712786247
+
+DESCRIPTION="container signing utility"
+HOMEPAGE="https://sigstore.dev"
+SRC_URI="https://github.com/sigstore/cosign/archive/v${PV}.tar.gz -> ${P}.tar.gz"
+SRC_URI+=" https://dev.gentoo.org/~williamh/dist/${P}-deps.tar.xz"
+
+LICENSE="Apache-2.0"
+SLOT="0"
+KEYWORDS="~amd64"
+
+RESTRICT="test"
+
+src_compile() {
+	emake \
+		GIT_HASH=${GIT_HASH} \
+		GIT_VERSION=v${PV} \
+		GIT_TREESTATE=clean \
+		SOURCE_DATE_EPOCH=${SOURCE_DATE_EPOCH}
+}
+
+src_install() {
+	dobin cosign
+	einstalldocs
+dodoc CHANGELOG.md
+}
diff --git a/app-containers/grype/Manifest b/app-containers/grype/Manifest
index a05da27da3b7..a1cd739fbc70 100644
--- a/app-containers/grype/Manifest
+++ b/app-containers/grype/Manifest
@@ -6,8 +6,11 @@ DIST grype-0.72.0-deps.tar.xz 599210536 BLAKE2B 4912cf4278488e78c7a174654da20f64
 DIST grype-0.72.0.tar.gz 1114440 BLAKE2B 931f4bdd883471e8b34b09dd1df53d4e67df96fc0d7be5224d1acfecc618cb068ee268f4b269e5a7f5e01a6605b9e01f8bb6a150819e8410a6b4f0daa12877ff SHA512 8335de5cba0b11500df1404afeee311be50c7e55d1a57c85cbebe830c9e8d9d21ff7b35ab6110200e57f464e999576f395814a56485115f8c7ed7b6e9f7dafb9
 DIST grype-0.73.0-deps.tar.xz 627765660 BLAKE2B 3d3949922a635d0654120aaf05edef38e7ae998c7beab89a7f13de994ab5f34bd6ade6a67145f5a366a2956ffb124a94a952b426a71cb50a7a30f65a7d721784 SHA512 f2e0ba2da0c196e705a23efc9e989ed3525d3465d661a2d5ce832c0663b0226a885541d91a773922f32de4d849030b73c307487eec00d0498368925213b9444d
 DIST grype-0.73.0.tar.gz 1124082 BLAKE2B 835b1833e6809510821f07906df06c55b418f7226dba190b4bf4f32ae603c006842496512d5e788eef8f2ce7e215a923bc338a1c55f089a3942476275663a6b2 SHA512 06be60104f23be38578660a79d3c593e988e2c5fce646b00dedec9af4d3442f204f81d063806944cfdaa04daffdff256ac71b52ed94d8ae07acde1e15c442f08
+DIST grype-0.79.3-deps.tar.xz 219363916 BLAKE2B 7396b4f0bd734504b30c971c592dae49a7ebc118db6efdb668d412622708797b8ef0ebded3a1d0474e3fb2fc1d6a3ac078b11de9fb38f5d15cc5edcbd57276be SHA512 b037535208652b64dd424a2daf9caf5232e40e0dba344c62600c0065f342206edc2797b9e155a5830f013744c3aa1d6564e623261a0cd6c1c3124eaae3f80899
+DIST grype-0.79.3.tar.gz 1165282 BLAKE2B 016e2a0ccad51757be83146fd6d187929e61f37531881bf811b6058daf935733f6a6ed23a9fac818a6a6ef815227fa045806c79ef2820a9ee78711cb417c0698 SHA512 0fbae679e8fd43efc2440d6db2f46a51ea4b6acd76f72a69d278b9eec85204b2b36d9077963fea2541bb4ada168802349fc066ffa260678e13429301cecac960
 EBUILD grype-0.59.1.ebuild 1023 BLAKE2B 8d4ce4307ec848da05516489f099158224abca6b5a6819380474f17fc24d5091bff4e7e27b5c38369180cd428dc233532d2b04da7e06b47cb6db6e17d2a70fe3 SHA512 d799c31d8aa2f4b3bcc2dcdd1ef07a9077ae8a27a9c4c3be6b51553a7ade723341cff4ca6f0a4b9bce5b1fe29cf26debcce3ebe0de396fce5bddd60c8139735d
 EBUILD grype-0.61.0.ebuild 1023 BLAKE2B 63abd430cac2ca93b867fa373b64b2a08e7b260a88ffb85b6b8671499da3ff74329689c7e5b458cde93f804a21eaa412fd7c009418e2a4952ab0ed13543de487 SHA512 cfd2690ed7aa6fd88ab972bc14d7751be55058c12956a76bf7235bf39ceb9d72bcaa9bf59289380a1ededbde0c0f9d03bb2a0de57074a5e294a03c2a15899ef0
 EBUILD grype-0.72.0.ebuild 1036 BLAKE2B 8b2b561d94fa4655b49489e36877dca86bf52b50d7cef8bfca0fc64b249f17006514aa7c79eccf7bceb8dd6ee43f9c6f9b8b94cc2fc71bfeab33341fb4d95f53 SHA512 db6c00d1f8471ec0f00045ea5762c6eab0411721b2a457a43862cbee4473b956efdc968c4a0f4bcc1fa3f6feff035e785dc13dbd8d8401c1c05055fafa07ba67
 EBUILD grype-0.73.0.ebuild 1036 BLAKE2B a0407cd9bc0f4d3e42c26ed5fd51474a0bdf2a4794d071addc5c36faa36146420945f56d3572ff19b87dc719edc11a8f02c9a77b78979a6533ab4fad96475349 SHA512 74bd9285dd8209a034e51fb651def8bc9dbd7731fc4c7fbe0415f50d3deff456fa06a75d943a536c476d2475aed45257289a69cb9fd555e632307330e8b09040
+EBUILD grype-0.79.3.ebuild 1035 BLAKE2B d0c01bda0594c7ea467e5079535f474f2802d417c37c8b40b7b25c079f02a488fe0cef1e01012052ad1de7433c5582b5079086b41b1bf23822cfbd3f933395de SHA512 3d7954f03807f1b816507c9f1b7eff02a2bbcce1252134b4557a7e7abeeb05ca6cf062992200d2a25b41223d85424e540ccb8de1c3c64af35389dcff14272496
 MISC metadata.xml 249 BLAKE2B 08603bf9d754b59bae12620988552abc7f76b87a1390d02038789eba034c22412a3593d10f443794a5171ff3905c2b5c822368b2eb9f53a528097b7b6c80ffe9 SHA512 338d72efbd040697be98aad4229b81c9694eb27ecbc39f3a18332f4cc766a46b4a0a92f32612203259bf58f5838d0aff7f0b1abec7766f6cd2394c73f7f0b251
diff --git a/app-containers/grype/grype-0.79.3.ebuild b/app-containers/grype/grype-0.79.3.ebuild
new file mode 100644
index 000000000000..1458a1b7ff9d
--- /dev/null
+++ b/app-containers/grype/grype-0.79.3.ebuild
@@ -0,0 +1,34 @@
+# Copyright 2022-2024 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+inherit go-module
+GIT_COMMIT=45b7236e948ef973a8a6ffbac52dff28be0fd70e
+SYFT_VERSION=1.9.0
+
+DESCRIPTION="A vulnerability scanner for container images and filesystems"
+HOMEPAGE="https://www.anchore.com"
+SRC_URI="https://github.com/anchore/grype/archive/v${PV}.tar.gz -> ${P}.tar.gz"
+SRC_URI+=" https://dev.gentoo.org/~williamh/dist/${P}-deps.tar.xz"
+
+LICENSE="Apache-2.0"
+SLOT="0"
+KEYWORDS="~amd64"
+
+# tests require a running docker
+RESTRICT="test"
+
+src_compile() {
+	ego build -o bin/grype -ldflags "
+		-extldflags '-static'
+		-X github.com/anchore/grype/internal/version.version=${PV}
+		-X github.com/anchore/grype/internal/version.syftVersion=${SYFT_VERSION}
+		-X github.com/anchore/grype/internal/version.gitCommit=${GIT_COMMIT}
+		-X github.com/anchore/grype/internal/version.buildDate=${BUILD_DATE}
+		-X github.com/anchore/grype/internal/version.gitDescription=v${PV}
+		" ./cmd/grype
+}
+
+src_install() {
+	dobin bin/grype
+}
diff --git a/app-containers/runc/Manifest b/app-containers/runc/Manifest
index 58d205662f83..58277ab41aa2 100644
--- a/app-containers/runc/Manifest
+++ b/app-containers/runc/Manifest
@@ -1,3 +1,5 @@
 DIST runc-1.1.12.tar.gz 2522196 BLAKE2B 14fe8d5f82d5b4d7f6b4bb9111c5d258e74f6a44aeb51fc87c69104e95b9bf24a3d503f4cc5dedb40d542fbd4b6e27273f456bda4fcf3bc298eb93ae292d9663 SHA512 92e8ac54a77d7ebcc76b5a9cc08d9a064211f12e9d26f064070cc203a5afb11c3af28d8f556f297513f797a2933d50bf10a8f22e307724041d66aa8c5ca1d9d3
+DIST runc-1.1.13.tar.gz 2532849 BLAKE2B f3d3171ffce2bb833bfb5cc21d0dc034fd7e38c47ee098cc1fc75c06fd4dfae21dfe25c2e69a1ca93b29d36e8799727ea41725eee8aca3a059c14dab6c8a435f SHA512 644bf9e6359bf49bbdec667c0f7c69ded78c7eacfc2d1b730d52fdcf7348571c6406b8e5790811fe3662a458c878e4225c3559885f0d95f8905273e7e40e55ad
 EBUILD runc-1.1.12.ebuild 1833 BLAKE2B 6815357831f57776945cb6c7d8e8e0a7735aacfa35ee4329ad5e8a8c165f788812c7a347b6933fd05e29b063dab3e886fa3e37f57d2e66f0d46401a65c620b8a SHA512 eb290a626e95d3cfc5ecc308aa63891e19f6d6e5092aa3704cdc174d7ed917dd8c53f86dc13a6ec9ddfcbf04a5c826fc1e6cc10ffe20c431209dadd9fcc427b0
+EBUILD runc-1.1.13.ebuild 1779 BLAKE2B e96b0bea4e8b2f0890c3a9dbbac809787e1d78022bfa34ba85bf528bd253a3acbbf4985ddb745a64018d159e02a9b8ee98f4e2907f25cfc372e3b8284ecaddd9 SHA512 e509e11e78246b47e3af3b5d5b0a4acddcd1ec31a632f7920cea8f1859194d2dada536a46543607250a770caed9a89a20eef7ec78f95848a896ccbadc0403268
 MISC metadata.xml 647 BLAKE2B 67dce497b4fa65db5146f9e017ec00795ad4ef5d63058d4c20bfc730f17e2fabfcd82b403bd06330f9a68ef2e344198514930493eeadef69eb2ee8a618e5e0fc SHA512 970d9753c81eb387a06fc24be8bfb3b056e9e7cbf568f99511bdcfd35f6a8cdfe21ea0103ea36b8fba7be733016493663c3a38452b05225de35af7e1c5b359dc
diff --git a/app-containers/runc/runc-1.1.13.ebuild b/app-containers/runc/runc-1.1.13.ebuild
new file mode 100644
index 000000000000..821b7ad84de7
--- /dev/null
+++ b/app-containers/runc/runc-1.1.13.ebuild
@@ -0,0 +1,77 @@
+# Copyright 1999-2024 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+inherit go-module linux-info
+
+# update on bump, look for commit ID on release tag.
+# https://github.com/opencontainers/runc
+RUNC_COMMIT=58aa9203c123022138b22cf96540c284876a7910
+CONFIG_CHECK="~USER_NS"
+
+DESCRIPTION="runc container cli tools"
+HOMEPAGE="https://github.com/opencontainers/runc/"
+MY_PV="${PV/_/-}"
+SRC_URI="https://github.com/opencontainers/${PN}/archive/v${MY_PV}.tar.gz -> ${P}.tar.gz"
+S="${WORKDIR}/${PN}-${MY_PV}"
+
+LICENSE="Apache-2.0 BSD-2 BSD MIT"
+SLOT="0"
+KEYWORDS="~amd64 ~arm ~arm64 ~ppc64 ~riscv ~x86"
+IUSE="apparmor hardened +kmem +seccomp selinux test"
+
+DEPEND="seccomp? ( sys-libs/libseccomp )"
+
+RDEPEND="
+	${DEPEND}
+	!app-emulation/docker-runc
+	apparmor? ( sys-libs/libapparmor )
+	selinux? ( sec-policy/selinux-container )
+"
+
+BDEPEND="
+	dev-go/go-md2man
+	test? ( "${RDEPEND}" )
+"
+
+# tests need busybox binary, and portage namespace
+# sandboxing disabled: mount-sandbox pid-sandbox ipc-sandbox
+# majority of tests pass
+RESTRICT+=" test"
+
+src_compile() {
+	# Taken from app-containers/docker-1.7.0-r1
+	CGO_CFLAGS+=" -I${ESYSROOT}/usr/include"
+	CGO_LDFLAGS+=" $(usex hardened '-fno-PIC ' '')
+		-L${ESYSROOT}/usr/$(get_libdir)"
+
+	# build up optional flags
+	local options=(
+		$(usev apparmor)
+		$(usev seccomp)
+		$(usex kmem '' 'nokmem')
+	)
+
+	myemakeargs=(
+		BUILDTAGS="${options[*]}"
+		COMMIT="${RUNC_COMMIT}"
+	)
+
+	emake "${myemakeargs[@]}" runc man
+}
+
+src_install() {
+	myemakeargs+=(
+		PREFIX="${ED}/usr"
+		BINDIR="${ED}/usr/bin"
+		MANDIR="${ED}/usr/share/man"
+	)
+	emake "${myemakeargs[@]}" install install-man install-bash
+
+	local DOCS=( README.md PRINCIPLES.md docs/. )
+	einstalldocs
+}
+
+src_test() {
+	emake "${myemakeargs[@]}" localunittest
+}
diff --git a/app-containers/syft/Manifest b/app-containers/syft/Manifest
index 811a7a221e3e..24bffc537a7e 100644
--- a/app-containers/syft/Manifest
+++ b/app-containers/syft/Manifest
@@ -6,8 +6,11 @@ DIST syft-0.94.0-deps.tar.xz 502576092 BLAKE2B 35c13d34a7a4b2afafb9b73502f4258b3
 DIST syft-0.94.0.tar.gz 5266343 BLAKE2B 892c7bf90a1d15fd926207acd1a28e8bd907ae5869be763e48ccd8d3279975c2ec84d9ec5842e3799460a823b5aa611a028982d8d40d90248c1cfad25415c672 SHA512 171b23271f03e1e824dcac41a563f7947d004797a21e762eea883ea680e0de65a532e03e4b245a4021288fec60142da8c1c16d6520eadece65728728b9d15f91
 DIST syft-0.95.0-deps.tar.xz 525784260 BLAKE2B 8aa9da529a605725ecbcc4ec98bef651218ee7b1ed08564fae0911fc83f78a13f7773c8c6e7c12f0ecb4b979477e1ea1a89354c11de932ef2e0a45b1fb80ec10 SHA512 0571b3586d27d1cf76a6bfd4c3fd5c06f796bd94feea63303c8464c602ce91f94e4bdc0002eb7241ff967e4146ec2a91cce428ad495d89dfda078a968e43d63f
 DIST syft-0.95.0.tar.gz 5328311 BLAKE2B 555844c771dc57dd396f4016095a8e462b5088abf7d7dc2f77b14dcd98bd77fb58598c1011145ce001117ea3059cf93f2b4a1d2a7c01914cd1e5b855e79394cc SHA512 6509d7a505ff1adc37386bccfefb8ce106ff8c1ffe267ee768f731ef865c731dec3603c055d094363aae8b0ad6dd09547cb4b7e5a8d6993d7f8e09ef47f195c3
+DIST syft-1.9.0-deps.tar.xz 207469280 BLAKE2B 38b428c8062f006586c0b7f1b8aeb2af09063d9f665a5a18c50dbe3848436cac80da2d2fd441a07d76787cb8e66d35fd322c7f9d1254662bf34fd29d05116e22 SHA512 34aa74de4befc2d097cb01e0ff3b37fd30cfca60b4d916f3fe7578848b6f2bb4ea263431adff7852b2b70dc9a4f7b50e75cfd58ee6ea3c604d03f7bde5ab10e6
+DIST syft-1.9.0.tar.gz 5825322 BLAKE2B e6b0808de2179a8956a1ba30138bcf11b0fead1c154a8d432cd852d6be2753075491c43f238943883d1c8080f7c24fc9a617daff4457aba6731831c619ff9223 SHA512 0a116accd3762fa6c43475b52c85d9a103423aa5f747b86209f128a2484b54e20d17d0dce7ec88c412e95f6685f8a47032bbfe812e6fceb39451cf1faa9e7fbb
 EBUILD syft-0.75.0.ebuild 1022 BLAKE2B 13c05009e638e74bf19c3352d9f1883606e5fe0ae7ca990eac41a1af156818d8943150c2cea4bca77e5bd68b728476fded8d0445bd46389198dbaa80386ecc43 SHA512 ef07ae5cbd2aaac66f0533b49726f96519cb9e3836b8ea6d3e7121b3b4f4ff1bee0cb1e63a84578855209da076104999eadaa28d4cef0b73be4fb1a617798e1a
 EBUILD syft-0.76.0.ebuild 1022 BLAKE2B 2baa4060ef36710239a643944c99e14f38f6be7806895c424fe0be2a3bfe0635aea8ecbd7fd5f40dcac475bb6c9e0faef79e69238ea2d989f0c31667d5cc96ce SHA512 4ef63335d0f183e576ab51570e2a19601965373e70b1230db44645d0638948b87c691b8e90246d6b42d7a38e7cae7d32e3061804a0b4ab73b61e63e36e0ca8e4
 EBUILD syft-0.94.0.ebuild 1022 BLAKE2B ee31e493fc2ee14668b77963c4f1488e31546075925c4852a971469ffc7f689bebe9efff5a04b4cb38e77c86107a24ea2ddcb41a3d33b74470dfad2f3b4be86c SHA512 e8886a7063e2b1c5465fc7b0706fc437492e39d3b63f7e1a4d2bfa7b1cdf6716d31401667c8088e062de291e13dab75d0d1f4c64451593357228c6c0e1c85fd9
 EBUILD syft-0.95.0.ebuild 1022 BLAKE2B 12ceee0dde83aac139c95482c321310ca7fbb76dd33e1ab6cc31ff176e1af146a305faa2f8a54b791e8cb3efb66d411fc7d5fb000a18b3930047209246b47d4c SHA512 f89fe1792bb9150ffb5d0108f1d08678bfe62d26a723b33e480b4ff03f740a3ad7561bf40ce4f9f62fd63109d39882096a4489181f75d0f4510693a2cd422b54
+EBUILD syft-1.9.0.ebuild 1069 BLAKE2B 2d6d8adbf54c4e66e73faabc6864d8c9082957a019380996b718546b3c48645d4a05c15a8b689ecb32d0dfa339d62ac8fe6725c4afa4a7e24a371c48e85e12d6 SHA512 0fcd57a4bb7b89f6742e997d116fc7e805ae2718502db27d2176706c048ffe649da2375546ed297a72d450ba16c2026b197adcf8e2fc71992d5b0c1cb8b9c38d
 MISC metadata.xml 326 BLAKE2B 889352fc9244f1d8a8d456a2ee031b28221a45e42772f38a2a8e43e31240d552eeaf1844ddd6b337f4ab63625d12c467618814ef3ca4f00a5dcc34a7187e86c4 SHA512 ea81e45fd0362f2b065b748a48e99eec5924f947bb3f6db725b6851678bd686a17c6873a0ebba9774a4563f57da2e67c1e86fe95679f0d057a19303f98ce5a36
diff --git a/app-containers/syft/syft-1.9.0.ebuild b/app-containers/syft/syft-1.9.0.ebuild
new file mode 100644
index 000000000000..da16f3691897
--- /dev/null
+++ b/app-containers/syft/syft-1.9.0.ebuild
@@ -0,0 +1,36 @@
+# Copyright 2022-2024 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+inherit go-module
+GIT_COMMIT=4e09908ba124dca7e6f1f6e7dc4f4663fae658ca
+
+DESCRIPTION="Generate a Software Bill of Materials from container images and filesystems"
+HOMEPAGE="https://www.anchore.com"
+SRC_URI="https://github.com/anchore/syft/archive/v${PV}.tar.gz -> ${P}.tar.gz"
+SRC_URI+=" https://dev.gentoo.org/~williamh/dist/${P}-deps.tar.xz"
+
+LICENSE="Apache-2.0"
+SLOT="0"
+KEYWORDS="~amd64 ~arm64"
+
+# tests require a running docker daemon
+RESTRICT="test"
+
+src_compile() {
+	local BUILD_DATE
+	BUILD_DATE=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+	ego build -o bin/syft -ldflags "
+		-extldflags '-static'
+		-X github.com/anchore/syft/internal/version.version=${PV}
+		-X github.com/anchore/syft/internal/version.gitCommit=${GIT_COMMIT}
+			-X github.com/anchore/syft/internal/version.buildDate=${BUILD_DATE}
+			-X github.com/anchore/syft/internal/version.gitDescription=v${PV}
+		" ./cmd/syft
+}
+
+src_install() {
+	dobin bin/*
+	insinto /usr/share/"${PN}"
+	doins -r examples
+}