Perform data science on data that remains in someone else's server
Scans Software Bill of Materials (SBOMs) for security vulnerabilities
The official Syft worker for Web and Node, built in Javascript
The official Syft worker for secure on-device machine learning
Example goreleaser + github actions config with keyless signing, SBOM generation, and attestations
git diff for your SBOM — compare CycloneDX/SPDX/Syft bills of materials, detect tampering, and gate CI
Defines types for all Serde encoding across languages
Practical Cybersecurity Supply Chain Risk Management
BomLens — a local-first SBOM generator & open-source risk assessor (CycloneDX). Produce an SBOM, an open-source notice, and a security/license risk report from source code, containers, binaries, firmware, or an SBOM you received. CLI or web UI, no SaaS.
Ansible role for 'syft'. Available on Ansible Galaxy.
A demonstration of how GoReleaser can help us to make software supply chain more secure by using bunch of tools such as cosign, syft, grype, slsa-provenance
Инструмент для безопасной генерации, анализа и форматирования Software Bill of Materials (SBOM).
AegisFlow is a threat-aware CI/CD pipeline that integrates real-time threat intelligence (AlienVault OTX), MITRE ATT&CK-based static analysis, and SBOM-driven CVE detection to automate secure software delivery.
Middleware that helps to add redux action to the Rollbar.Telemetry
Add a description, image, and links to the syft topic page so that developers can more easily learn about it.
To associate your repository with the syft topic, visit your repo's landing page and select "manage topics."