software-composition-analysis

A command-line tool and Go library that generates Software Bill of Materials (SBOMs) from container images and filesystems to identify packages and dependencies for security analysis.

Snyk is an AI-powered developer security platform that automatically scans, prioritizes, and fixes vulnerabilities across code, open source dependencies, containers, and cloud infrastructure from a unified dashboard.