TLDR Tech / DevOps
Syft (GitHub Repo)
Syft is a CLI tool and Go library for generating Software Bills of Materials from container images and filesystems, with support for many package ecosystems, OCI/Docker/Singularity images, CycloneDX/SPDX output, and signed SBOM attestations. It's a strong fit for DevOps and DevSecOps readers because SBOM generation is increasingly table stakes for container security, compliance, vulnerability scanning, and supply-chain visibility.
Read the full story