What would you like to be added:

Modern .net app, you can publish your app as a single self-contained file using PublishSingleFile, it packs everything inside including deps.json.

Why is this needed:

syft doesn't pick up the embedded deps.json in single-file executables, so it misses dependency info for .net apps built this way.

Additional context:

t deps.json file is baked into the singlefile bundle as a bin resource, so to get it out you gotta read the executables resource section and parse the data, adding this would let syft report deps more accurately for modern .net apps

build with

  --self-contained true \
  -p:PublishSingleFile=true