Syft Sbom Generator Containers Filesystems

---
name: "Syft SBOM Generator for Containers and Filesystems"
slug: "syft-sbom-generator-containers-filesystems"
description: "Syft by Anchore is a CLI tool for generating Software Bills of Materials (SBOMs) from container images and filesystems. Supports CycloneDX, SPDX, and multiple output formats with coverage across dozens of packaging ecosystems including npm, PyPI, Go, and more."
github_stars: 8628
verification: "security_reviewed"
source: "https://github.com/anchore/syft"
category: "Security & Verification"
framework: "Claude Code"
tool_ecosystem:
  github_repo: "anchore/syft"
  github_stars: 8628
---

# Syft SBOM Generator for Containers and Filesystems

Syft by Anchore is a CLI tool for generating Software Bills of Materials (SBOMs) from container images and filesystems. Supports CycloneDX, SPDX, and multiple output formats with coverage across dozens of packaging ecosystems including npm, PyPI, Go, and more.

## Installation

Requirements and caveats from upstream:
- Supports dozens of packaging ecosystems (e.g. Alpine (apk), Debian (dpkg), RPM, Go, Python, Java, JavaScript, Ruby, Rust, PHP, .NET, and [many more](https://oss.anchore.com/docs/capabilities/all-packages/))
- Supports OCI, Docker, [Singularity](https://github.com/sylabs/singularity), and [more image formats](https://oss.anchore.com/docs/guides/sbom/scan-targets/)
- **See [Installation docs](https://oss.anchore.com/docs/installation/syft/) for more ways to get Syft, including Homebrew, Docker, Scoop, Chocolatey, Nix, and more!**

Basic usage or getting-started notes:
- **New to Syft? Check out the [Getting Started guide](https://oss.anchore.com/docs/guides/sbom/getting-started/) for a walkthrough!**
- The quickest way to get up and going:
- bash

- Source: https://github.com/anchore/syft
- Extracted from upstream docs: https://raw.githubusercontent.com/anchore/syft/HEAD/README.md

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/syft-sbom-generator-containers-filesystems/)