HomeServices › Syft

Syft on a Mac

Generate SBOMs from images & filesystems (self-hosted CLI) · Secrets Scanning & Supply Chain Security

Syft (Anchore) generates a Software Bill of Materials (SBOM) from container images and filesystems — brew install syft, then syft -o spdx-json (or CycloneDX). Feed the SBOM to Grype for vuln scanning and attach it as a Cosign attestation. The standard open-source SBOM generator.

Run Syft with FrontierStack

FrontierStack lists Syft in its Secrets Scanning & Supply Chain Security catalog. Install or connect it from one place, then monitor its status, ports and certificate, secure it with the firewall and Malware Audit, and back it up.

Run it all from one Mac app.

FrontierStack installs, monitors and secures the whole stack — locally and across your fleet — from a single native macOS app.

Download FrontierStack

Related in Secrets Scanning & Supply Chain Security