Syft (syft)
SBOM.
Generated from catalog/components/syft.yaml: do not edit by hand.
| Purpose | SBOM |
| Kit capability | SBOM |
| Plane | infrastructure and DevSecOps |
| State | integrated |
| Pinned version | 1.55.0 |
| Licence | Apache-2.0 |
| Licence text | https://raw.githubusercontent.com/anchore/syft/v1.55.0/LICENSE (checked on 2026-10-30) |
| Licence status | allowed |
| Licence exception | - |
| Upstream repository | https://github.com/anchore/syft |
| Owner | security-engineering |
| Distribution | CI tool |
Images and version pins
| Role | Kind | File | Value |
|---|---|---|---|
| CI | text | tools/components/fetch-syft.sh | SYFT_VERSION="1.55.0" |
Container images
No container image is pinned by reference in this manifest.
Dependencies
This component has no dependency.
Operations
| Supported | install, configure, upgrade, rollback, decommission |
| Not supported | start, stop, restart, rolling-restart, drain, scale, backup, restore, repair, rotate |
Back to the component index.