old bitnami images without spdx files arent getting picked up correctly in the catalog #4529
Description
What happened:
the cataloger relies on spdx files, so when older bitnami images don’t have them, it skips over their packages and misses possible vulnerabilities
e.g
https://hub.docker.com/r/bitnamilegacy/mongodb/tags?name=4.4.11
What you expected to happen:
Steps to reproduce the issue:
Anything else we need to know?:
Environment:
- Output of
syft version: latest 1.39.0 - OS (e.g:
cat /etc/os-releaseor similar):