syft - CLI tool and library for generating a Software Bill of Materials (SBOM)
| Website: | https://github.com/anchore/syft |
|---|---|
| License: | Apache-2.0 |
- Description:
Syft is a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems. It supports dozens of packaging ecosystems and multiple output formats including CycloneDX, SPDX, and Syft JSON.
Packages
| syft-1.51.0-3.el8.x86_64 [22.9 MiB] |
Changelog
by Scott R. Shinn (2026-08-10):
- Keep BuildRequires golang >= 1.25 so Amazon Linux 2023 can install a compiler - Override GOSUMDB/GOPROXY/GOTOOLCHAIN so Go can download the 1.26.3 toolchain |
Package contents (click to display)
[f] /usr/share/licenses/syft/LICENSE
[d] /usr/share/licenses/syft [f] /usr/share/doc/syft/README.md [d] /usr/share/doc/syft [f] /usr/lib/.build-id/73/1645ed2cd0c265cbe1adab9c89d1191723e670 [d] /usr/lib/.build-id/73 [d] /usr/lib/.build-id [f] /usr/bin/syft |
| syft-1.51.0-2.el8.x86_64 [22.9 MiB] |
Changelog
by Scott R. Shinn (2026-08-10):
- Set GOTOOLCHAIN=auto so Go 1.26.3 can be fetched when distro golang is 1.26.1 |
Package contents (click to display)
[f] /usr/share/licenses/syft/LICENSE
[d] /usr/share/licenses/syft [f] /usr/share/doc/syft/README.md [d] /usr/share/doc/syft [f] /usr/lib/.build-id/73/1645ed2cd0c265cbe1adab9c89d1191723e670 [d] /usr/lib/.build-id/73 [d] /usr/lib/.build-id [f] /usr/bin/syft |