syft

syft - A CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems.

View Repository
9752 Stars
1021 Forks
Apache-2.0 License
Go Language
2026-10-26 Last Update
697 Open Issues
containers cyclonedx docker go golang hacktoberfest oci sbom spdx static-analysis tool
← All Package Management