syft

About this project

Syft A CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems. Exceptional for vulnerability detection when used with a scanner like Grype.                         Features — Generates SBOMs for container images, filesystems, archives (see the docs for a full list of supported scan targets) — Supports dozens of packaging ecosystems (e.g. Alpine (apk), Debian (dpkg), RPM, Go, Python, Java, JavaScript, Ruby, Rust, PHP, .NET, and many more) — Supports OCI, Docker, Singularity, and more image formats — Works seamlessly with Grype for vulnerability scanning —…

GitHub

Reviews

Built by

anchore

Imported from GitHub · not yet claimed on GitPalace

View developer pageSign in with GitHub to claim

Maintain anchore/syft? Claiming verifies admin access through your GitHub account and gives you control of this listing.

You might also like

kubernetes

Infrastructure

Production-Grade Container Scheduling and Management

★ New126.4K stars

by kubernetes

immich

Infrastructure

High performance self-hosted photo and video management solution.

★ New113.5K stars

by immich-app

RuView

Infrastructure

π RuView turns commodity WiFi signals into real-time spatial intelligence, vital sign monitoring, and presence detection

★ New92.6K stars

by ruvnet

Stirling-PDF

Infrastructure

#1 PDF Application on GitHub that lets you edit PDFs on any device anywhere

★ New91.4K stars

by Stirling-Tools