Syft

Generate software bills of materials from images and files

Security & Privacysbomsoftware-supply-chaincontainers

1views0clicks

About

Syft is a command-line tool for inventorying packages in container images, directories, and archives. It exports software bills of materials in formats including CycloneDX and SPDX, and its output can feed a separate vulnerability scanner such as Grype. Use the Apache-licensed CLI through native binaries or documented package-manager installation paths.

Listing source: Original source. How we curate tools.

Use Cases

Inventory packages inside container images
Export CycloneDX or SPDX SBOM files
Pass package inventories to vulnerability-scanning workflows

More Security & Privacy tools

Joplin

Note taking application with markdown editor and encryption support for mobile and desktop platforms. Runs client-side and syncs through a self hosted Nextcloud instance or similar (alternative to Eve

Free56.7K

77views9clicks

trivy

A Simple and Comprehensive Vulnerability Scanner for Containers and other Artifacts, Suitable for CI. Trivy detects vulnerabilities of OS packages (Alpine, RHEL, CentOS, etc.) and application dependen

Open Source36.1K