# Install syft CLI for generating a Software Bill of Materials from container images. Version 1.45.1 via Homebrew; verified 2026-06-05. ## Install ```sh sudo av install brew:syft ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install syft ``` Evidence: local Homebrew formula metadata ### Linux - apk (92%): ```sh sudo apk add syft ``` Evidence: Alpine Linux edge package indexes: syft from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - Nix (92%): ```sh nix profile install nixpkgs#syft ``` Evidence: nixpkgs package indexes: pkgs/by-name/sy/syft/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S syft ``` Evidence: Arch Linux sync databases: syft from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install syft ``` Evidence: openSUSE Tumbleweed package metadata: syft from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst ### Windows - Chocolatey (92%): ```sh choco install syft ``` Evidence: Chocolatey community package catalog: syft from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','swissfileknife' - Scoop (92%): ```sh scoop install main/syft ``` Evidence: Scoop official bucket manifest trees: bucket/syft.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id Anchore.Syft -e ``` Evidence: Windows Package Manager source index: Anchore.Syft from https://cdn.winget.microsoft.com/cache/source.msix ## Package Facts - **Package key:** brew:syft - **Package manager:** Homebrew - **Package manager URL:** - **Version:** 1.45.1 - **Source summary:** CLI for generating a Software Bill of Materials from container images - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-06-05T16:16:22Z - **Generated:** 2026-06-10T07:18:26+00:00 ## Executables - syft (cli) - syft (alias) ## Build Dependencies - go ## Install Behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-06-10 - Package-manager version: 1.45.1 - Package-manager updated: 2026-06-05 - Local data status: ok - Upstream repository: https://github.com/anchore/syft - Upstream latest detected: v1.45.1 (current) ## Notes de sécurité broad file, network, media, or database tool signal. infrastructure mutation or orchestration signal. - **Geiger risk:** orange / medium - broad file, network, media, or database tool signal - infrastructure mutation or orchestration signal ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** syft - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - syft: normalized package name match | nixpkgs package indexes: pkgs/by-name/sy/syft/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - apk - syft - 1.42.4-r1: normalized package name match | Alpine Linux edge package indexes: syft from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Generate a Software Bill of Materials (SBOM) from container images and filesystems | https://github.com/anchore/syft - apk - syft-bash-completion - 1.42.4-r1: normalized package name match | Alpine Linux edge package indexes: syft-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Bash completions for syft | https://github.com/anchore/syft - apk - syft-fish-completion - 1.42.4-r1: normalized package name match | Alpine Linux edge package indexes: syft-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Fish completions for syft | https://github.com/anchore/syft - apk - syft-zsh-completion - 1.42.4-r1: normalized package name match | Alpine Linux edge package indexes: syft-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Zsh completions for syft | https://github.com/anchore/syft - pacman - syft - 1.44.0-1: normalized package name match | Arch Linux sync databases: syft from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | CLI tool and library for generating a Software Bill of Materials from container images and filesystems | https://github.com/anchore/syft - zypper - syft - 1.44.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: syft from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | CLI tool and library for generating a Software Bill of Materials | https://github.com/anchore/syft - zypper - syft-bash-completion - 1.44.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: syft-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | Bash Completion for syft | https://github.com/anchore/syft - zypper - syft-fish-completion - 1.44.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: syft-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | Fish Completion for syft | https://github.com/anchore/syft - zypper - syft-zsh-completion - 1.44.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: syft-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | Zsh Completion for syft | https://github.com/anchore/syft - Chocolatey - syft: normalized package name match | Chocolatey community package catalog: syft from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','swissfileknife' - Scoop - main/syft: normalized package name match | Scoop official bucket manifest trees: bucket/syft.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget - Anchore.Syft: normalized package name match | Windows Package Manager source index: Anchore.Syft from https://cdn.winget.microsoft.com/cache/source.msix ## Related Links - [Cloud CLI packages](https://www.automicvault.com/fr/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Source-control packages](https://www.automicvault.com/fr/pkg/source-control-tools/) - Belongs to a source-control command family. - [Secret-risk packages](https://www.automicvault.com/fr/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/fr/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [go](https://www.automicvault.com/fr/pkg/brew/go/) - Build dependency declared by Homebrew. - [cdxgen](https://www.automicvault.com/fr/pkg/brew/cdxgen/) - Shares av.db curated category or tags: cli, sbom, security, software-supply-chain. - [chainloop-cli](https://www.automicvault.com/fr/pkg/brew/chainloop-cli/) - Shares av.db curated category or tags: cli, sbom, security, software-supply-chain. - [cargo-audit](https://www.automicvault.com/fr/pkg/brew/cargo-audit/) - Shares av.db curated category or tags: cli, security, software-supply-chain. - [sbom-tool](https://www.automicvault.com/fr/pkg/brew/sbom-tool/) - Shares av.db curated category or tags: cli, sbom, security, software-supply-chain. - [cyclonedx-python](https://www.automicvault.com/fr/pkg/brew/cyclonedx-python/) - Shares av.db curated category or tags: cli, sbom, security, software-supply-chain. - [cyclonedx-gomod](https://www.automicvault.com/fr/pkg/brew/cyclonedx-gomod/) - Shares av.db curated category or tags: cli, sbom, security, software-supply-chain. - [tern](https://www.automicvault.com/fr/pkg/brew/tern/) - Shares av.db curated category or tags: cli, containers, sbom, security, software-supply-chain. - [phylum-cli](https://www.automicvault.com/fr/pkg/brew/phylum-cli/) - Shares av.db curated category or tags: cli, security, software-supply-chain. ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph