Syft
A command-line tool and Go library that generates Software Bill of Materials (SBOMs) from container images and filesystems to identify packages and dependencies for security analysis.
Related Technologies
Competition
Competes With
90% confident
tern
Direct competitors
Competes With
80% confident
cyclonedx generator
Direct competitors
Alternative To
80% confident
kubernetes bom
Can replace or substitute
Competes With
70% confident
microsoft sbom tool
Direct competitors
Competes With
70% confident
spdx sbom generator
Direct competitors
Competes With
60% confident
trivy
Direct competitors
Alternative To
60% confident
distro2sbom
Can replace or substitute
Integration
Compatible With
100% confident
grype
Works well together
Integrates With
100% confident
docker
Official integration support
Integrates With
90% confident
github actions
Official integration support
Integrates With
80% confident
jenkins
Official integration support
Integrates With
70% confident
kubernetes
Official integration support
Integrates With
80% confident
gitlab ci
Official integration support