macco-robotics/syft

Syft is a CLI tool and Go library that generates Software Bill of Materials (SBOMs) from container images and filesystems, supporting dozens of packaging ecosystems and multiple output formats. It's designed for developers, security teams, and DevOps professionals who need to inventory software dependencies, perform vulnerability detection, and maintain compliance through comprehensive SBOM generation.