syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Tool containers cyclonedx docker
Minimal
Install package
Latest min add syft - Source archive SHA256
- 8e84d456…036d
- Spec hash
- a7285d19…9ee2
- Target
- amd64/linux
- Needs network
- Yes
- Closed source
- No
Quick links
What is syft?
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
How to use this package
Quick install
Installs the package into the current environment for this session. Use --build or --runtime to persist it as a build-time or runtime dependency.
min add syftDeclare as a task dependency in minimal.toml
Listing the package under tasks.<name>.packages makes it available inside that task’s sandbox.
[tasks.dev]
packages = ["syft"]Build-time vs runtime
Choose build-time for tools needed during compilation, runtime for dynamic libraries loaded at runtime.
min add --build syft
min add --runtime syft