Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
- Stars
- 38.6k
- Growth
- –
- Launched
- Apr 2019
Apache-2.0updated today
Syft
anchore/syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
- Stars
- 9,707
- Launched
- May 7, 2020
- License
- Apache-2.0
- Language
- Go
- Release, 1d ago
- v1.55.0
- Activity
- updated 1d ago
- containers
- docker
- go
- golang
- static-analysis
- tool
- oci
- sbom
What Syft buries
Other ways to bury Snyk
Find secrets with Gitleaks
- Stars
- 30.2k
- Growth
- –
- Launched
- Jan 2018
MITupdated 21d ago
Find, verify, and analyze leaked credentials
- Stars
- 28.6k
- Growth
- –
- Launched
- Dec 2016
AGPL-3.0updated today
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
- Stars
- 17.2k
- Growth
- –
- Launched
- Dec 2019
LGPL-2.1updated today
A vulnerability scanner for container images and filesystems
- Stars
- 13.1k
- Growth
- –
- Launched
- May 2020
Apache-2.0updated 1d ago
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
- Stars
- 11.2k
- Growth
- –
- Launched
- Nov 2022
Apache-2.0updated today