OSS Support Hub / Security

Go Security Apache-2.0 Latest: v1.48.0

Syft

CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images

Project Health at a Glance

Live data from GitHub, updated daily.

9.2K+119
GitHub Stars
📦
v1.48.0
Latest Release · Yesterday
🔄
16d
Avg. Release Cadence
🐛
596
Open Issues
📅
Yesterday
Last Commit
🔒
✓ Clean
No Active CVEs

Data last fetched: 2026-07-17

Known Vulnerabilities

✓ No active CVEs found for Syft in OSV.dev

Alternatives to Syft

Other Security projects in the Go ecosystem worth evaluating.

Support Options for Syft

Commercial Support from DepKeep

Get SLA-backed support, security patches, and direct access to senior engineers for Syft — without relying on volunteer maintainers.

Community Channels