251 syft(1) - Kailash Tool Reference
251.1 syft
syft - Anchore Syft — SBOM generation CLI for container images and filesystems.
| Layer | DEFENCE |
| Category | d-04-provenance-signing-trust |
| Safety class | safe |
| Licence | Apache-2.0 |
| Upstream | github.com/anchore/syft |
251.1.1 NAME
syft - Anchore Syft — SBOM generation CLI for container images and filesystems.
251.1.2 SYNOPSIS & usage
Derived from the upstream README at generation time; verify against --help where the tool is installed.
curl -sSfL https://get.anchore.io/syft | sudo sh -s -- -b /usr/local/bin# container image
syft alpine:latest
# directory
syft ./my-project251.1.3 DESCRIPTION (upstream)
A CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems. Exceptional for vulnerability detection when used with a scanner like Grype. 
<img alt=
251.1.4 CONFIGURATION (detected)
Config-surface markers detected in the upstream README (2 matches, e.g. validations.yaml, validations.yaml). A full config reference page for this tool is queued under the config-page policy — this line is the detection record, not the page.
251.1.5 SEE ALSO
- Category: d-04-provenance-signing-trust in the category directory (sister tools listed there).
ref: pin - verified 2026-10-14