component-detection
component-detection copied to clipboard
Support scanning Linux container archives (tarball)
syft already supports this:
docker-archive:path/to/yourimage.tar use a tarball from disk for archives created from "docker save"
oci-archive:path/to/yourimage.tar use a tarball from disk for OCI archives (from Skopeo or otherwise)
It would allow using container build engines other than Docker.