Wednesday, 29 July 2026 @ 15:01 UTC~4613,752154,724

Syft

Anchore Inc·Anchore.Syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Syft is a powerful and easy-to-use open-source tool for generating Software Bill of Materials (SBOMs) for container images and filesystems. It provides detailed visibility into the packages and dependencies in your software, helping you manage vulnerabilities, license compliance, and software supply chain security.

winget install --id Anchore.Syft --exact --source winget

Latest 1.49.0·July 21, 2026

Release Notes

Added Features

  • Support for application/vnd.oci.image.index.v1+json manifests in root OCI layout [Issue #1545] [PR #5074 @jasonpaulos]

Bug Fixes

  • Misinterpretation of Multiple replace Directives in Golang [Issue #2721] [PR #5069 @ychampion]

Dependencies 16 dependency changes (16 updated). Updated (16 packages)

  • github.com/anchore/go-rpmdb v0.1.0 → v0.2.0
  • github.com/anchore/stereoscope v0.2.2 → v0.3.0
  • github.com/containerd/containerd/v2 v2.3.2 → v2.3.3
  • github.com/docker/cli v29.5.3+incompatible → v29.6.1+incompatible
  • github.com/gkampitakis/go-snaps v0.5.22 → v0.5.23
  • github.com/moby/moby/api v1.54.2 → v1.55.0
  • github.com/moby/moby/client v0.4.1 → v0.5.0
  • github.com/pelletier/go-toml/v2 v2.3.1 → v2.4.3
  • golang.org/x/crypto v0.53.0 → v0.54.0
  • golang.org/x/mod v0.37.0 → v0.38.0
  • golang.org/x/net v0.56.0 → v0.57.0
  • golang.org/x/sync v0.21.0 → v0.22.0
  • golang.org/x/sys v0.46.0 → v0.47.0
  • golang.org/x/term v0.44.0 → v0.45.0
  • golang.org/x/text v0.38.0 → v0.40.0
  • golang.org/x/tools v0.47.0 → v0.48.0 (Full Changelog)

Installer type: zip

x64—6EDFF6C6E06DDD43AE3B779099653F499A856009786B5375A7CF23AED6B67B1A
arm64—EC62DD8FE827113F70FC8FE856067F2B8686B2F037533AE05C89B39CB9A6AF90

Details

Homepage
https://github.com/anchore/syft
License
Apache-2.0
Publisher
Anchore Inc
Support
https://github.com/anchore/syft/issues
Moniker
syft

Tags

containerscyclonedxdockergogolanghacktoberfestocisbomspdxstatic-analysistool

Older versions (45)

1.48.0
x64—B46CB02A47C5B76A1656958757D62AC07D0CB7DE35F92E8A7E02D450CBB53097
arm64—7AC974AD525DF58707DCDCDF3A54528EE31F6B104C8D42500DF11987E469BC1E
1.46.0
x64—1E515C1AC4BC65917F8D0A52B6AE0E611082779CBF2DA9D470282158DD24EA13
arm64—D72F3E59E1FDD1A5F35EC7F0C7B5584094388CBE98677D9B925E2926F872D37C
1.45.1
x64—A9D12C26521E09213745884B8B7DC361DFF83188C3A1ADA0DA1AF71012DBCD52
arm64—A95BEFD77B590A8C4A83ADC7EDAC538A8FAB5D23793BF678F4BC7F603E6A4CAD
1.45.0
x64—D50095A7D125AC8C0E27F1E2CE770EF8696D6452D08FDE61F5ADB863C16341FD
arm64—04C75A5F6ED818115871083BA4BA032B4146C8DBC2C8AB5AF8378CCB353A4E02
1.44.0
x64—195E786EB84EC145854F20528992E86637C77D1968731DFE6CE850C90E28F47A
arm64—3EBCDE4F1BDFD3149C4527B85279CFC725BA7660CCF54B68B51BE06A9271808E
1.43.0
x64—C51695D171C61460369DABDD5C71B8F350EF8618466818356A30808D7105C710
arm64—4CBA6630F4AE27AEB63D10E2961B7FF8212781A8C7D9FE92127FB09881B14C99
1.42.4
x64—A712F912E8FC83CE2BF6A7CEA213C2D5185778D66EA2E07D42C767817F77E381
1.42.3
x64—E1B9F4945AA64C2B34970BEC617623D7F803D0661B48A50B966768B363322E2D
1.42.2
x64—15CB7BE07A3928DAEE49BFB599A9076F9E300187EFC2133EFD9E8CE08293CA2A
1.42.1
x64—9EB2C582AF26B2E8DCBB6F63494E6BC7739821E1D8D29B7096224218FF26C892
1.42.0
x64—4C2B0EF868C4FDC602257089AC73A1B8B4C3C1099B809D80E81AE7F6488FFF32
1.41.2
x64—693C8546E7497D3060B38E67DC1632E16BEE60D83D95F44B9D13D4866336DF33
1.41.1
x64—0BAB55A5B9A22DEA6D5F5CA173355084A1DB5AD1BC7186A51B4F5A53E4190A81
1.41.0
x64—C80BB78A7C418AB11F61AE868496FC9CE38A203A3A4106A73001C352B1268995
1.40.1
x64—EEDAC363E277DFECAC420B6E4ED0A861BC2C9C84A7544157F52807A99BFF07CD
1.40.0
x64—3F4021EC098B4BCBAF19BBA7028CF7704FEF12936970778CEC3C6D669B740E6D
1.39.0
x64—FCF42129786C8F7520EE87204851C38438F68EEC20FE69313BEC5B43B0549914
1.38.2
x64—74D57DACA2A9D08F0D470D3C4C11E8B98ED4A5EE5ABB70F1ED9D207D319FCF51
1.38.0
x64—11A3DE4C82B001DAE3B69E336F1B89391B676B3E74CEAD73790C97FF57445941
1.37.0
x64—7E3602F4B95FD916080EC9348805D79B33E6BB37C693D83AA2D3C85423CEAEA5
1.36.0
x64—7182BEEE937737905C18F17D5DFF0896690BF9C1B8CE7C3B08BE18D5EC1E87CD
1.34.2
x64—69833F07006B830290347DBC275F86D2D6CFF13541E343BAC5D3569668752B7A
1.34.1
x64—10A221A61A4F51EE5EDCF12011FAEAC20E17814C73E3D183C0313E0810FA9BAB
1.33.0
x64—0E1326E27A5E48102D9F806EB03B9C80D3D5E7B78ABFD19A04887B2A0EDD22B7
1.32.0
x64—444FD054F601594AD938EC3F9BFD92FAACFD37783E0E107B49BCB41848BF5DC4
1.31.0
x64—DE5FD21A90B8C469E7333025E8FC7251C0C6AB6B3F92E0F335A60492A55B0BED
1.30.0
x64—9E354AB18359E018BF8C654713EC44CE5AD1056F231C9D031749F38C1FD2B963
1.29.1
x64—3C67CD9AF40CDCC7FFCE041C8349B4A77F33810184820C05DF23440C8E0AA1D7
1.29.0
x64—043ABDA6CF37235484C8C96925983F5C28275A92963D4817AB066355C4D037B6
1.28.0
x64—A1637FDC074E9C80C6BF900DF26A883516BF32E90499E3BD9AA314493D40A0A8
1.27.1
x64—50AC4D381E58FB16A115A7458AA3F1BA48E54CECDB6A632417439BBC553BC6F7
1.27.0
x64—8D418EC4C1CB9EFB6CC6C1A1216A8EFD070895740D99C4ACDDD98D79EA9E1890
1.26.1
x64—7AF7ACB9F81BDDDBC343855CB3A42E1D38AE9A1B044BFCD9B975A118D107849E
1.26.0
x64—ECA51FB712144A3AF97C3699BDE32E0FF5D389ED97985FFF975FD46B92410075
1.25.1
x64—22E24AB95A119A09445BC60019AEF6083719C6377DC5D4615E2A93175C502F43
1.24.0
x64—808BB98F771A7C4C4D3956B659CE3E454AC4E6B26AE01DF597AFB17FAA1A839D
1.23.1
x64—A377DC1BC38727EB98300256DD1BB72D3329745160F5E8AAB7699928F8A0C589
1.23.0
x64—7D874B8EBCAC4E24CA5872597D527E3A249BB4504ED3EB5467A6E89CA40E0E32
1.22.0
x64—656E1DD6007D24F1D276F789650BD014082B2FFF5FF3708DDA7FDD1D9B27C77B
1.21.0
x64—B75893F72DA8051A3EB1B7B37F062200CAF892F4160BBA3099A26F28CA8AE7A1
1.20.0
x64—B8BFDEDB261DE2A69768097422A73BC72273EE92136FF676A20C3161E658881F
1.19.0
x64—405171C57DB0C0A6C259A90673AE498482F2501E8AC9B685A94FA186DD6B9A4B
1.18.1
x64—85476686B4EAAF4175A16C1CBEF391C5396E06CDBEF171AE8B7B2F7117E5B038
1.17.0
x64—A533CE601ED66A2BE3B3418FE914BAA1CF946E80E47DFBD71A58D8F7894C0A0E
1.16.0
x64—682F9499757E2E7D9633039D049BE54F4817FAB29D306C4DBF093C48C8968C13