syft - CLI tool and library for generating a Software Bill of Materials (SBOM)
| Website: | https://github.com/anchore/syft |
|---|---|
| License: | Apache-2.0 |
- Description:
Syft is a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems. It supports dozens of packaging ecosystems and multiple output formats including CycloneDX, SPDX, and Syft JSON.
Packages
| syft-1.51.0-3.el9.x86_64 [22.5 MiB] |
Changelog
by Scott R. Shinn (2026-08-10):
- Keep BuildRequires golang >= 1.25 so Amazon Linux 2023 can install a compiler - Override GOSUMDB/GOPROXY/GOTOOLCHAIN so Go can download the 1.26.3 toolchain |
Package contents (click to display)
[f] /usr/share/licenses/syft/LICENSE
[d] /usr/share/licenses/syft [f] /usr/share/doc/syft/README.md [d] /usr/share/doc/syft [f] /usr/lib/.build-id/4e/c55c0cb1d9bd66ea410dc2a061db016189ae20 [d] /usr/lib/.build-id/4e [d] /usr/lib/.build-id [f] /usr/bin/syft |
| syft-1.51.0-2.el9.x86_64 [22.5 MiB] |
Changelog
by Scott R. Shinn (2026-08-10):
- Set GOTOOLCHAIN=auto so Go 1.26.3 can be fetched when distro golang is 1.26.1 |
Package contents (click to display)
[f] /usr/share/licenses/syft/LICENSE
[d] /usr/share/licenses/syft [f] /usr/share/doc/syft/README.md [d] /usr/share/doc/syft [f] /usr/lib/.build-id/4e/c55c0cb1d9bd66ea410dc2a061db016189ae20 [d] /usr/lib/.build-id/4e [d] /usr/lib/.build-id [f] /usr/bin/syft |