CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Syft is a powerful and easy-to-use open-source tool for generating Software Bill of Materials (SBOMs) for container images and filesystems. It provides detailed visibility into the packages and dependencies in your software, helping you manage vulnerabilities, license compliance, and software supply chain security.
#sbom #security #cli #devsecops
https://github.com/anchore/syft