@SyftProject

Syft is an open source tool to generate a Software Bill of Materials (SBOM) from a container image or filesystem. Created and maintained by @Anchore.

github.com/anchore/syft
Joined October 2021
  • Tweets828
  • Following312
  • Followers1.1K
392Media
Well, this is awkward... reddit.com/r/devops/comments…
A question posed in r/devops - "Do OSS compliance tools have to be this heavy? Would you use one if it was just a CLI?"...

ALT A question posed in r/devops - "Do OSS compliance tools have to be this heavy? Would you use one if it was just a CLI?"...

1
1
4
140
Just launched: Day 1 of Anchore's #SBOMlearningWeek ! Start with the fundamentals in our latest blog - whether you have 15 minutes or an hour, we've got resources to jumpstart your SBOM knowledge. anchore.com/blog/sbom-fundam… #AppSec
1
64
Grype's latest release features a major upgrade to its database schema (v6), resulting in faster scans, smaller downloads, and improved vulnerability detection. Learn more in our blog post: anchore.com/blog/grype-db-sc… #vulnerabilitymanagement #opensource #security
2
2
70
Dear Santa 🎅🏻, 🙏 Please, may we have 9000 stars on @github for Christmas?🎄 We've been very good this year 😇 In 2024, we did over 30+ releases, hundreds of vulndb updates, and helped many people & organizations secure their code 💪 Love, Grype xx PS, github.com/anchore/grype 🌟
A screenshot from star history shows that we have 8981 stars on 16th December 2024.

ALT A screenshot from star history shows that we have 8981 stars on 16th December 2024.

1
1
2
191
We're 🌟live🌟 in an hour, working on Open Source. 🌱 Join us with questions, comments & your important Syft & Grype bugs! 🐞 youtube.com/watch?v=K4oB5MOu… #sbom #opensource #security
2
2
392
Do you have something to discuss about our open-source tools Syft, Grype, and Grant? 🤔 We're available in 4 hours via Zoom for your questions, comments, and other topics. Details below 👇 anchorecommunity.discourse.g…

December 5th | Community Meeting | Zoom call

Anchore OSS Community Meeting this Thursday 📣 If you’re a user of or contributor to Syft or Grype, and have something you’d like to discuss, the team will be available. The Zoom call can be used to...

anchorecommunity.discourse.group
1
1
73
I had fun recently learning video editing using DaVinci Resolve. I used my newfound skills to crank out a quick @syftproject and @grypeproject video. Still, there is lots to learn and plenty to improve. Enjoy. Constructive feedback welcome. youtube.com/watch?v=ZUpUiG3Q…

One Minute Security: Build SBOM & Scan Vulns with Syft + Grype

Learn how to quickly generate an *SBOM* (Software Bill of Materials...

youtube.com
2
2
8
639
We're 🌟live🌟 in fifteen minutes, working on Open Source. 🌱 Join us with questions, comments & your important Syft & Grype bugs! 🐞 youtube.com/watch?v=da8lxRHP… #sbom #opensource #security
1
1
100
Good morning! Question for #Windows users: Do you use #WSL or #Git Bash? How do you add essential tools like curl? We had a valid issue filed by a grype user on Windows using Git Bash. Is Git Bash commonly used on Windows? More than WSL? github.com/anchore/grype/iss…

Removal of temporary files not working on Windows · Issue #2233 · anchore/grype

What happened: Hi guys! When I use grype with Git Bash on Windows grype has trouble to remove files and directories: $ grype . [00...

github.com
2
3
160
Hey everyone! Here's my brief "Trip Report" from #AllThingsOpen this week. anchorecommunity.discourse.g…

All Things Open 2024 Trip Report

Introduction All Things Open (ATO) is a large Open Source conference, held annually in Raleigh, North Carolina, USA. As an organisation, Anchore attended for the first time this year. It was also my...

anchorecommunity.discourse.group
1
5
471
Grype-db v0.26.0 released 🎉 github.com/anchore/grype-db/…

Release v0.26.0 · anchore/grype-db

v0.26.0 Added Features Add symlink support for cache backup and restore [#415 @wagoodman] (Full Changelog)

github.com
2
3
130
🚨 Attending #AllThingsOpen next week in Raleigh? We'll see you there! Anchore is presenting in booth #95, stop by to talk #opensource and score a Grype t-shirt. More >>> allthingsopen.org/
2
2
419
In this setup, where would you put your webcam? 🤔 ⓵, ⓶, ⓷, or ⓸? Later today, I'm doing a webinar featuring the integration of @SyftProject in Anchore Enterprise. I need help deciding where to put the webcam! Tune in later today to find out: get.anchore.com/introducing-…
A photograph of a desk with a keyboard, computer, and display. The display has a Syft logo (an owl) and the word 'syft' displayed. There are four coloured numbers 1, 2, 3, 4 around the screen. 1 is above, 2, is to the left side, 3 is to the right, and 4 is below.

ALT A photograph of a desk with a keyboard, computer, and display. The display has a Syft logo (an owl) and the word 'syft' displayed. There are four coloured numbers 1, 2, 3, 4 around the screen. 1 is above, 2, is to the left side, 3 is to the right, and 4 is below.

2
1
2
894
Grype v0.82.0 released 🎉 🚨 Please also see this announcement: anchorecommunity.discourse.g… from Will Murphy on the Grype team! github.com/anchore/grype/rel…
2
6
158
I don't often look at Reddit, but when I do... ❤️ reddit.com/r/golang/comments…
A screenshot from a thread on r/golang on reddit. Someone asked about Go Projects to contribute to. Another person mentioned Syft and Grype, Traefic and etcd! Nice.

ALT A screenshot from a thread on r/golang on reddit. Someone asked about Go Projects to contribute to. Another person mentioned Syft and Grype, Traefic and etcd! Nice.

1
3
6
656
Grype v0.81.0 released 🎉 This release adds support for the latest @Microsoft @Azure #Linux 3.0! 🐧 github.com/anchore/grype/rel…

Release v0.81.0 · anchore/grype

Added Features add distro mapping for azure linux 3 [#1848 @willmurphyscode] Support for Azure Linux 3.0 [#1829] (Full Changelog)

github.com
3
5
434
Do I know any #ruby dependency relationship experts? 🤔 We have an open task in @SyftProject for various ecosystems, including Ruby. Experts from that (or any community in the issue) could contact us if they can help. 🙏 Summary below 👇 Please share. github.com/anchore/syft/issu…

Add support for package dependency relationships · Issue #572 · anchore/syft

What would you like to be added: Support tracking the full dependency graph for packages in the form of relationships, for the ecosystems that support extracting this information. Why is this neede...

github.com
3
2
353
We're 🌟live🌟 in 2 hours with our Open Source Gardening stream. 🌱 Watch us every Thursday at 20:00 UK / 3 PM ET / 12 PM PT with Q&A, comments & your Syft & Grype bugs! 🐞 Join in Zoom if you can. Details below ⬇️ anchorecommunity.discourse.g… #sbom #opensource #security

August 22nd | Open Source Gardening | Live Stream

Every Thursday, the Anchore Open Source team runs a live stream to discuss issues, pull requests and future planning in our SBOM and vulnerability tools. ⏰ Starts at 2024-08-22T19:00:00Z (UTC) (your...

anchorecommunity.discourse.group
2
3
130
The team has posted an update about this on our discourse. TL;DR: On Friday, we fixed an issue causing slow downloads of the Grype vuln database. Grype’s will pick up the fix; there’s no need to change Grype’s configuration or update Grype. anchorecommunity.discourse.g…

Grype Vulnerability Database Hosting Update

Hi all, On Friday, we fixed an issue causing slow downloads of the Grype vulnerability database. Grype’s default behavior will pick up the fix; there’s no need to change Grype’s configuration or...

anchorecommunity.discourse.group
4
5
393
We're 🌟live🌟 now, working on Open Source. 🌱 Join us with questions, comments & your favorite @SyftProject & @GrypeProject bugs! 🐞 #sbom #opensource #security youtube.com/live/T9OkSGu23j4
1
1
96
Load more