Syft on a Mac

Generate SBOMs from images & filesystems (self-hosted CLI) · Secrets Scanning & Supply Chain Security

Syft (Anchore) generates a Software Bill of Materials (SBOM) from container images and filesystems; brew install syft, then syft -o spdx-json (or CycloneDX). Feed the SBOM to Grype for vuln scanning and attach it as a Cosign attestation. The standard open-source SBOM generator.

Run Syft with FrontierStack

Install or connect Syft; then check its status, ports and certificate from FrontierStack. The same screen links to firewall checks, Malware Audit and backups where they apply.

Related in Secrets Scanning & Supply Chain Security

• Snyk
• Dependabot
• Renovate
• Trivy
• Grype
• Cosign
• Sigstore
• Chainguard