anchore / syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

anchore/syft Issues

SBOM generated for JAR doesn't parsing all pom.xml
Updated 2 days ago2
Install Issue - Ubuntu Image on Mac M1 Pro
Updated 2 days ago3
Match Data Against ClearlyDefined
Updated 8 days ago1
Capture licenses for all packages
Updated 8 days ago
Scanning a git repository folder present in /tmp produce an empty sbom
Updated 10 days ago
Not all the packages are getting imported in Blackduck scanner
Updated 11 days ago5
Improve linting for `defer Close` type issues
Closed 11 days ago2
Golang: Search remote licenses not working in a CI pipeline when scanning Docker image
Updated 14 days ago4
Incorrect package name and purl of dotnet nuget packages
Updated 14 days ago13
layers attribute in image is sorted from upper layer to base layer
Closed 15 days ago1
Relationships / Dependencies are present in Syft json and SPDX json files but not in Cyclonedx json file format
Updated 15 days ago3
Clearly document the fact that CPE strings could be made up
Updated 15 days ago1
Recognition of files in a folder works inconsistently between Linux distributions.
Updated 16 days ago1
New version 1.3.0 leads to "too many open files" while scanning bigger images
Closed 16 days ago1
Add `bun-lock-cataloger` & `bun-binary-cataloger` catalogers
Updated 16 days ago1
Binary copied to image omitted from SBOM
Updated 16 days ago4
[Feature] Syft for 32 bits ARM arch
Closed a month ago5
SBOM is generated with empty name
Updated 22 days ago4
Catalog TiDB binary
Updated 22 days ago
Ignore Go compiler affecting CVE when Docker image only contains a binary compiled with Go
Updated 22 days ago2
Support Swift Package Manager Package.resolved schema version 3
Updated 22 days ago2
Syft panics when scanning OCI image that contains packaged helm chart
Closed 24 days ago5
License not pickedup for binaries like java (openjdk), node (nodejs)
Updated a month ago4
components inside tar.gz / tgz not picked up
Closed a month ago2
Add support for GitHub Actions
Closed a month ago6
Properties metadata.manifest.main are no more available in json output
Closed a month ago2
Redis not listed in the artifact lists of the bitnami/redis image
Updated a month ago2
Pom parser not resolving all dependency versions
Closed a month ago
Regression in 1.1 cataloging openjdk: generates version containing a null byte
Closed a month ago13
Add support for dnf packages
Closed a month ago1
Syft reports some fw* pckages, which are nowhere to find
Closed a month ago4
Packages not being found in 1.0.1
Updated a month ago8
fix panic scanning binaries without symtab
Closed 2 months ago2
Extract full license text
Updated 2 months ago5
Scan images in Kubernetes manifest(s)
Updated 2 months ago3
pdm support
Updated 2 months ago3
Add time taken for each cataloger
Updated 2 months ago
Misinterpretation of Multiple replace Directives in Golang
Updated 2 months ago1
Image tag not contain all specified catalogers
Closed 2 months ago2
Detect ELF package notes from fedora binaries
Updated 2 months ago
Identify non-distro dpkg entries
Updated 2 months ago6
Unable to scan OCI images with syft v0.105.1
Closed 3 months ago7
Detect wordpress
Updated 2 months ago5
About Linux Kernel
Updated 2 months ago6
Additional globs for Debian cataloger
Updated 2 months ago2
Support for Itsy Package Management System (ipkg)
Updated 2 months ago
Python .whl files not detected on directory scan
Updated 2 months ago1
OpenSSL binary matcher fails to properly detect letter releases
Closed 3 months ago
TUI package count does not match package count in default table output
Closed 3 months ago1
New path filtering logic excluding large number of unintended paths
Closed 3 months ago5