syft

syft - A CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems.

View Repository
9633 Stars
976 Forks
Apache-2.0 License
Go Language
2026-10-02 Last Update
646 Open Issues
containers cyclonedx docker go golang hacktoberfest oci sbom spdx static-analysis tool
← All Package Management