Generate Software Bill of Materials from container images and filesystems.
npx skills add https://github.com/zzw4257/security-skills --skill syft
Please help me install this Agent Skill. Skill: Syft Source: https://github.com/zzw4257/security-skills/tree/main/skills/syft Command: npx skills add https://github.com/zzw4257/security-skills --skill syft
This Skill automates the generation of Software Bill of Materials (SBOMs) from container images and local filesystems, providing a comprehensive inventory of software components.
Use the syft skill to generate an SBOM for the current directory.
High-intent search queries and answers about installing and using this skill.
Generating an SBOM from a container image involves analyzing the image layers to identify installed packages and dependencies, producing a comprehensive software inventory for supply chain security and compliance.
Automating software inventory for CI/CD pipelines requires integrating an SBOM generation step that scans new container images or filesystems, ensuring continuous visibility and compliance for your software supply chain.
Yes, you need the Syft CLI tool installed and accessible in your environment to scan filesystems and generate SBOMs, as the process relies on its underlying dependency analysis capabilities.
Yes, you can export SBOMs in SPDX or CycloneDX formats, allowing you to create detailed software component inventories that integrate with standard supply chain security and compliance frameworks.
Yes, filesystem dependency analysis works on local directory structures by scanning the directories to identify installed packages and their dependencies, generating a complete Software Bill of Materials for the target path.
jrjsmrtnHarden container images with digest pinning, verified fetches, and grype/syft scanning.
DTMC-marketplaceGenerate CycloneDX and SPDX SBOMs with VEX vulnerability tracking.
AgentSecOpsScan container images and SBOMs for vulnerabilities with Grype.
Muath2000Analyze software supply chain risks and generate SBOMs.
