SY

Syft

Generate software bills of materials from images and code

Developer Tools & Git ★ 9.4k stars Easy setup Apache-2.0

Syft is an open-source tool from Anchore that generates a software bill of materials (SBOM) from container images and filesystems. It supports many SBOM formats for self-hosted supply chain workflows.

Key features

  • SBOM generation
  • SPDX and CycloneDX output
  • Wide ecosystem support
  • Pairs with Grype

Strengths

  • Released under the Apache-2.0 license
  • Easy to set up — beginner-friendly
  • First-class Docker support for quick deployment
  • Mature project with 9.4k GitHub stars

Syft replaces

Compare Syft

14 head-to-head comparisons.

Similar developer tools & git apps