Source: syft Section: devel Maintainer: Debian Go Packaging Team Uploaders: Juan Manuel Méndez Rey , Build-Depends: debhelper-compat (= 14), dh-go (>= 1.69), golang-any (>= 2:1.26~), zip , golang-github-acarl005-stripansi-dev, golang-github-acobaugh-osrelease-dev, golang-github-adrg-xdg-dev, golang-github-anchore-bubbly-dev, golang-github-anchore-clio-dev, golang-github-anchore-fangs-dev, golang-github-anchore-go-collections-dev, golang-github-anchore-go-homedir-dev, golang-github-anchore-go-logger-dev, golang-github-anchore-go-lzo-dev, golang-github-anchore-go-macholibre-dev, golang-github-anchore-go-rpmdb-dev, golang-github-anchore-go-sync-dev, golang-github-anchore-go-version-dev, golang-github-anchore-packageurl-go-dev, golang-github-anchore-stereoscope-dev (>= 0.3.4), golang-github-anmitsu-go-shlex-dev, golang-github-aquasecurity-go-pep440-version-dev, golang-github-bitnami-go-version-dev, golang-github-blakesmith-ar-dev, golang-github-bmatcuk-doublestar-dev, golang-github-burntsushi-toml-dev, golang-github-cespare-xxhash-v2-dev, golang-github-charmbracelet-bubbles-dev, golang-github-charmbracelet-bubbletea-dev, golang-github-charmbracelet-lipgloss-dev, golang-github-cyclonedx-cyclonedx-go-dev, golang-github-dave-jennifer-dev, golang-github-deitch-magic-dev, golang-github-diskfs-go-diskfs-dev, golang-github-distribution-reference-dev, golang-github-dustin-go-humanize-dev, golang-github-elliotchance-phpserialize-dev, golang-github-facebookincubator-nvdtools-dev, golang-github-github-go-spdx-dev, golang-github-gkampitakis-go-snaps-dev, golang-github-go-git-go-billy-dev, golang-github-go-git-go-git-v5-dev, golang-github-go-test-deep-dev, golang-github-go-viper-mapstructure-dev, golang-github-goccy-go-yaml-dev, golang-github-gohugoio-hashstructure-dev, golang-github-google-go-cmp-dev, golang-github-google-go-containerregistry-dev, golang-github-google-licensecheck-dev, golang-github-google-uuid-dev, golang-github-gookit-color-dev, golang-github-gpustack-gguf-parser-go-dev, golang-github-hashicorp-go-cleanhttp-dev, golang-github-hashicorp-go-getter-dev, golang-github-hashicorp-go-multierror-dev, golang-github-hashicorp-hcl-v2-dev, golang-github-iancoleman-strcase-dev, golang-github-invopop-jsonschema-dev, golang-github-jedib0t-go-pretty-dev, golang-github-jinzhu-copier-dev, golang-github-kastenhq-goversion-dev, golang-github-klauspost-compress-dev, golang-github-magiconair-properties-dev, golang-github-masterminds-semver-dev, golang-github-masterminds-sprig-dev, golang-github-mholt-archives-dev, golang-github-moby-sys-dev, golang-github-nix-community-go-nix-dev, golang-github-olekukonko-tablewriter-dev, golang-github-oneofone-xxhash-dev, golang-github-opencontainers-go-digest-dev, golang-github-pb33f-ordered-map-v2-dev, golang-github-pelletier-go-toml-dev, golang-github-rust-secure-code-go-rustaudit-dev, golang-github-saintfish-chardet-dev, golang-github-sanity-io-litter-dev, golang-github-sassoftware-go-rpmutils-dev, golang-github-scylladb-go-set-dev, golang-github-sergi-go-diff-dev, golang-github-smallnest-ringbuffer-dev, golang-github-spdx-gordf-dev, golang-github-spdx-tools-golang-dev (>= 0.6.0~rc4), golang-github-spf13-afero-dev, golang-github-spf13-cobra-dev, golang-github-stretchr-testify-dev, golang-github-tailscale-hujson-dev, golang-github-ulikunitz-xz-dev, golang-github-vbatts-go-mtree-dev, golang-github-vifraa-gopom-dev, golang-github-wagoodman-go-partybus-dev, golang-github-wagoodman-go-progress-dev, golang-github-xeipuuv-gojsonschema-dev, golang-github-zyedidia-generic-dev, golang-golang-x-exp-dev, golang-golang-x-mod-dev, golang-golang-x-net-dev, golang-golang-x-time-dev, golang-golang-x-tools-dev, golang-gopkg-yaml.v3-dev, golang-howett-plist-dev, golang-modernc-sqlite-dev, golang-uber-goleak-dev, Standards-Version: 4.7.4 Testsuite: autopkgtest-pkg-go Homepage: https://github.com/anchore/syft Vcs-Browser: https://salsa.debian.org/go-team/packages/syft Vcs-Git: https://salsa.debian.org/go-team/packages/syft.git XS-Go-Import-Path: github.com/anchore/syft Package: syft Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends} Static-Built-Using: ${misc:Static-Built-Using} Description: CLI tool for generating Software Bill of Materials (SBOM) Syft is a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems. . Features include: - Generates SBOMs for container images, filesystems, archives, and more - Supports multiple package ecosystems (Alpine, Debian, RPM, Go, Python, Java, JavaScript, Ruby, Rust, PHP, .NET, and more) - Multiple output formats: SPDX, CycloneDX, Syft JSON - Integration with Grype for vulnerability scanning Package: golang-github-anchore-syft-dev Architecture: all Multi-Arch: foreign Section: golang Depends: ${misc:Depends}, golang-github-acobaugh-osrelease-dev, golang-github-adrg-xdg-dev, golang-github-anchore-bubbly-dev, golang-github-anchore-clio-dev, golang-github-anchore-fangs-dev, golang-github-anchore-go-collections-dev, golang-github-anchore-go-homedir-dev, golang-github-anchore-go-logger-dev, golang-github-anchore-go-macholibre-dev, golang-github-anchore-go-rpmdb-dev, golang-github-anchore-go-sync-dev, golang-github-anchore-go-version-dev, golang-github-anchore-packageurl-go-dev, golang-github-anchore-stereoscope-dev (>= 0.3.4), golang-github-anmitsu-go-shlex-dev, golang-github-aquasecurity-go-pep440-version-dev, golang-github-bitnami-go-version-dev, golang-github-blakesmith-ar-dev, golang-github-bmatcuk-doublestar-dev, golang-github-burntsushi-toml-dev, golang-github-cespare-xxhash-v2-dev, golang-github-charmbracelet-bubbles-dev, golang-github-charmbracelet-bubbletea-dev, golang-github-charmbracelet-lipgloss-dev, golang-github-cyclonedx-cyclonedx-go-dev, golang-github-dave-jennifer-dev, golang-github-deitch-magic-dev, golang-github-diskfs-go-diskfs-dev, golang-github-distribution-reference-dev, golang-github-dustin-go-humanize-dev, golang-github-elliotchance-phpserialize-dev, golang-github-facebookincubator-nvdtools-dev, golang-github-github-go-spdx-dev, golang-github-go-git-go-billy-dev, golang-github-go-git-go-git-v5-dev, golang-github-go-viper-mapstructure-dev, golang-github-goccy-go-yaml-dev, golang-github-gohugoio-hashstructure-dev, golang-github-google-go-cmp-dev, golang-github-google-go-containerregistry-dev, golang-github-google-licensecheck-dev, golang-github-google-uuid-dev, golang-github-gpustack-gguf-parser-go-dev, golang-github-hashicorp-go-cleanhttp-dev, golang-github-hashicorp-go-getter-dev, golang-github-hashicorp-go-multierror-dev, golang-github-hashicorp-hcl-v2-dev, golang-github-iancoleman-strcase-dev, golang-github-invopop-jsonschema-dev, golang-github-jedib0t-go-pretty-dev, golang-github-jinzhu-copier-dev, golang-github-kastenhq-goversion-dev, golang-github-masterminds-semver-dev, golang-github-masterminds-sprig-dev, golang-github-mholt-archives-dev, golang-github-moby-sys-dev, golang-github-nix-community-go-nix-dev, golang-github-olekukonko-tablewriter-dev, golang-github-oneofone-xxhash-dev, golang-github-opencontainers-go-digest-dev, golang-github-pelletier-go-toml-dev, golang-github-rust-secure-code-go-rustaudit-dev, golang-github-saintfish-chardet-dev, golang-github-sanity-io-litter-dev, golang-github-sassoftware-go-rpmutils-dev, golang-github-scylladb-go-set-dev, golang-github-spdx-gordf-dev, golang-github-spdx-tools-golang-dev, golang-github-spf13-afero-dev, golang-github-spf13-cobra-dev, golang-github-stretchr-testify-dev, golang-github-tailscale-hujson-dev, golang-github-ulikunitz-xz-dev, golang-github-vbatts-go-mtree-dev, golang-github-vifraa-gopom-dev, golang-github-wagoodman-go-partybus-dev, golang-github-wagoodman-go-progress-dev, golang-github-zyedidia-generic-dev, golang-golang-x-exp-dev, golang-golang-x-mod-dev, golang-golang-x-net-dev, golang-golang-x-time-dev, golang-golang-x-tools-dev, golang-gopkg-yaml.v3-dev, golang-howett-plist-dev, golang-modernc-sqlite-dev, Description: generate a Software Bill of Materials (library) Syft catalogues the packages in a container image or a filesystem and writes the result as an SBOM. This package provides its Go library: the catalogers for each ecosystem, the file and source abstractions, and the readers and writers for SPDX, CycloneDX and Syft's own JSON format. . It is what grype imports to describe what it is scanning.