v0.18.0

Tool Improvements

• Scan file descriptors rather than files per go-yara docs by @egibs in #406
• Use concurrency for path scanning by @egibs in #405

Rule Improvements

• Address Spark false positives by @egibs in #397
• Address onepassword-sdk false positives by @egibs in #404

Developer Improvements

• Bump golang.org/x/term from 0.22.0 to 0.23.0 by @dependabot in #401
• Bump step-security/harden-runner from 2.9.0 to 2.9.1 in the all group by @dependabot in #398
• Bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2 in the all group by @dependabot in #399
• Update bincapz to use go1.23 by @egibs in #403
• Add octo-sts identity to help with release automation by @egibs in #408
• Fix trust policy by @egibs in #409

New Contributors

• @octo-sts made their first contribution in #410

Full Changelog: v0.17.1...v0.18.0