Syft
devsecops sbom-generator
Anchore Software Bill of Materials (SBOM) generator
Pros and Cons
Ventajas
- + SBOM in multiple formats (SPDX, CycloneDX)
- + Wide ecosystem support
- + Open-source
- + Grype integration for vulnerabilities
- + Simple CLI
Desventajas
- - Requires SBOM knowledge
- - Can be slow on large images
Casos de Uso
- SBOM generation
- Supply chain transparency
- Regulatory compliance
- Dependency auditing