installation

Installer avec Automic Vault

Automic Vault

sudo av install brew:syft

macOS

Homebrewverified · 100%

brew install syft

local Homebrew formula metadata

Linux

Alpine Linux apkverified · 92%

sudo apk add syft

Alpine Linux edge package indexes · syft · source: dl-cdn.alpinelinux.org

Nixverified · 92%

nix profile install nixpkgs#syft

nixpkgs package indexes · pkgs/by-name/sy/syft/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%

sudo pacman -S syft

Arch Linux sync databases · syft · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%

sudo zypper install syft

openSUSE Tumbleweed package metadata · syft · source: download.opensuse.org

Windows

Chocolateyverified · 92%

choco install syft

Chocolatey community package catalog · syft · source: community.chocolatey.org

Scoopverified · 92%

scoop install main/syft

Scoop official bucket manifest trees · bucket/syft.json · source: api.github.com

Windows Package Managerverified · 92%

winget install --id Anchore.Syft -e

Windows Package Manager source index · Anchore.Syft · source: cdn.winget.microsoft.com

Source du gestionnaire de paquets

https://formulae.brew.sh/formula/syft

Notes de plateforme

Aucune note de plateforme propre au paquet n'était présente.

aperçu

Résumé du paquet

CLI for generating a Software Bill of Materials from container images

Page d'accueil

https://github.com/anchore/syft

Commandes et alias

syft

posture de sécurité

Niveau de risque : orange

broad file, network, media, or database tool signal. infrastructure mutation or orchestration signal.

Risk classifier

orange risk · medium confidence · infrastructure

Why

broad file, network, media, or database tool signal
infrastructure mutation or orchestration signal

Signals

text:container
text:image

Install behavior

No Homebrew post-install hook is recorded in formula metadata.
Homebrew bottle metadata is available for 6 platform targets.
Build metadata lists 1 build dependencies.

Revue recommandée

Avant une utilisation sans surveillance par un agent, vérifiez si l'outil lit des identifiants en clair, écrit un état distant, publie des artefacts ou lance des plugins.

exécutables

Exécutables installés

Commande	Type	Exposition	Note
`syft`	cli	global executable

fraîcheur

Version et fraîcheur

Ces signaux séparent l'âge de génération de la page, l'activité du gestionnaire de paquets et la comparaison avec les versions amont. Un retard de version n'est signalé que lorsqu'une URL de preuve et des versions comparables sont présentes.

page générée2026-06-10

version du gestionnaire1.45.1

gestionnaire mis à jour2026-06-05

données localesok

amontcurrent

dernière version détectéev1.45.1

https://github.com/anchore/syft

okNo freshness warnings were generated.

métadonnées d'installation

Métadonnées du paquet

Package key	brew:syft
Version	1.45.1
Package manager	Homebrew
Package manager page	https://formulae.brew.sh/formula/syft
Homepage	https://github.com/anchore/syft
Repository	https://github.com/anchore/syft
Upstream docs	https://github.com/anchore/syft/blob/main/README.md
License	Apache-2.0
Source archive	https://github.com/anchore/syft/archive/refs/tags/v1.45.1.tar.gz
Last updated	2026-06-05T16:16:22Z
Pulse	updated
Build dependencies	go
Bottle	available (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	not defined
Service	none declared

registry facts

Source database details

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	syft
Version Scheme	0
Revision	0
Head Version	HEAD
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	head stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

syft

nix profile install nixpkgs#syft

normalized package name match
Matched by: Syft

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/sy/syft/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

apk95%

syft 1.42.4-r1

Generate a Software Bill of Materials (SBOM) from container images and filesystems

https://github.com/anchore/syft

sudo apk add syft

License: Apache-2.0
Architecture: x86_64
Source Package: syft
1 dependencies
1 provides
normalized package name match
Matched by: Syft

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: syft from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

apk95%

syft-bash-completion 1.42.4-r1

Bash completions for syft

https://github.com/anchore/syft

sudo apk add syft-bash-completion

License: Apache-2.0
Architecture: x86_64
Source Package: syft
normalized package name match
Matched by: Syft

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: syft-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

apk95%

syft-fish-completion 1.42.4-r1

Fish completions for syft

https://github.com/anchore/syft

sudo apk add syft-fish-completion

License: Apache-2.0
Architecture: x86_64
Source Package: syft
normalized package name match
Matched by: Syft

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: syft-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

apk95%

syft-zsh-completion 1.42.4-r1

Zsh completions for syft

https://github.com/anchore/syft

sudo apk add syft-zsh-completion

License: Apache-2.0
Architecture: x86_64
Source Package: syft
normalized package name match
Matched by: Syft

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: syft-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

pacman95%

syft 1.44.0-1

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

https://github.com/anchore/syft

sudo pacman -S syft

License: Apache-2.0
Architecture: x86_64
1 dependencies
normalized package name match
Matched by: Syft

Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: syft from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

zypper95%

syft 1.44.0-1.1

CLI tool and library for generating a Software Bill of Materials

https://github.com/anchore/syft

sudo zypper install syft

License: Apache-2.0
Category: Unspecified
Architecture: x86_64
Source Package: syft
1 dependencies
1 provides
normalized package name match
Matched by: Syft

openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: syft from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst

zypper95%

syft-bash-completion 1.44.0-1.1

Bash Completion for syft

https://github.com/anchore/syft

sudo zypper install syft-bash-completion

License: Apache-2.0
Category: System/Shells
Architecture: noarch
Source Package: syft
2 dependencies
1 provides
normalized package name match
Matched by: Syft

openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: syft-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst

zypper95%

syft-fish-completion 1.44.0-1.1

Fish Completion for syft

https://github.com/anchore/syft

sudo zypper install syft-fish-completion

License: Apache-2.0
Category: System/Shells
Architecture: noarch
Source Package: syft
1 dependencies
1 provides
normalized package name match
Matched by: Syft

openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: syft-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst

zypper95%

syft-zsh-completion 1.44.0-1.1

Zsh Completion for syft

https://github.com/anchore/syft

sudo zypper install syft-zsh-completion

License: Apache-2.0
Category: System/Shells
Architecture: noarch
Source Package: syft
1 dependencies
1 provides
normalized package name match
Matched by: Syft

openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: syft-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst

Chocolatey95%

syft

choco install syft

normalized package name match
Matched by: Syft

Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: syft from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','swissfileknife'

Scoop95%

main/syft

scoop install main/syft

normalized package name match
Matched by: Syft

Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/syft.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

winget95%

Anchore.Syft

winget install --id Anchore.Syft -e

normalized package name match
Matched by: Syft

Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Anchore.Syft from https://cdn.winget.microsoft.com/cache/source.msix

graphe de paquets

Les liens viennent du graphe local de relations entre paquets, des suppléments, des dépendances, des correspondances d'écosystèmes et de l'appartenance aux hubs.

piste source

Généré depuis les données du dépôt

Cette page est servie par av-web depuis l'artéfact SQLite privé des paquets généré par scripts/generate-pkg-sqlite.py.

Sources utilisées

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

Installer syft

Installer avec Automic Vault

macOS

Linux

Windows

Source du gestionnaire de paquets

Notes de plateforme

Résumé du paquet

Page d'accueil

Commandes et alias

Niveau de risque : orange

Risk classifier

Why

Signals

Install behavior

Revue recommandée

Exécutables installés

Version et fraîcheur

Métadonnées du paquet

Source database details

Other package-manager records

Liens internes de paquets

Hubs thématiques

Outils liés

Même workflow

Agent security guides

Généré depuis les données du dépôt

Sources utilisées