syft

syft copied to clipboard

Add package description/summary to json output

2

**What would you like to be added**: Add rpm/gem/npm package description to json output **Why is this needed**: It's a required field for our company's internal SBOM. It might be...

yudong

Deduplicate found components or include more information

1

Perhaps related to https://github.com/anchore/syft/issues/32 Basically, after running Syft on an image primarily containing NPM packages I got a pretty large SBOM, and when looking into it, I saw a lot...

PapoyEdits

Get purl url from maven dependency

1

**What would you like to be added**: I use syft to create a sbom.xml to import in dependency-track. The sbom.xml is create from a java maven project. There are maven...

savujevi

**What would you like to be added**: **Why is this needed**: We (w/@srenatus @anderseknert) did a [similar effort](https://github.com/withfig/autocomplete/pull/854) in OPA to add autocompletion of opa CLI in by [fig](https://github.com/withfig/autocomplete). So,...

developer-guy

Extract Java or any other "language/framework" version from image

2

**What would you like to be added**: I would like Syft to be able to extract the Java version (or really any of the "large" language/framework versions like Java, Dotnet,...

PapoyEdits

This just adds another simple example of the Syft API usage, which demonstrates how to use a specific source.

kzantow

Additional globs for Debian cataloger

2

**What would you like to be added**: I have observed `status` files in real-world filesystems at paths that vary slightly from the set of globs currently searched for by the...

njv299

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.21.0 to 0.22.0. Commits 7ee34a0 go.mod: update golang.org/x dependencies c289c7a websocket: re-add documentation for DialConfig 9fb4a8c http2: send an error of FLOW_CONTROL_ERROR when exceed the maximum octets...

dependabot[bot]

``` TOOL UPDATE ───────────────────────── gh v2.44.1 → v2.45.0 ``` This is an auto-generated pull request to update all of the tools to the latest versions.

anchore-actions-token-generator[bot]

Python .whl files not detected on directory scan

1

**What happened**: When scanning a directory for packages, which includes both .rpm and .whl files, the catalogers properly reported the .rpm files, but did not report the .whl files. **What...

ariker