Download Latest Version syft_1.38.2_linux_s390x.tar.gz (22.5 MB)
Email in envelope

Get an email when there's a new version of syft

Home / v1.38.0
Name Modified Size InfoDownloads / Week
Parent folder
syft_1.38.0_checksums.txt 2025-11-17 2.3 kB
syft_1.38.0_checksums.txt.pem 2025-11-17 3.2 kB
syft_1.38.0_checksums.txt.sig 2025-11-17 96 Bytes
syft_1.38.0_windows_amd64.sbom 2025-11-17 277.5 kB
syft_1.38.0_windows_arm64.sbom 2025-11-17 277.5 kB
syft_1.38.0_darwin_amd64.sbom 2025-11-17 267.9 kB
syft_1.38.0_darwin_arm64.sbom 2025-11-17 267.9 kB
syft_1.38.0_linux_amd64.sbom 2025-11-17 266.7 kB
syft_1.38.0_linux_arm64.sbom 2025-11-17 266.7 kB
syft_1.38.0_linux_ppc64le.sbom 2025-11-17 267.2 kB
syft_1.38.0_linux_s390x.sbom 2025-11-17 266.7 kB
syft_1.38.0_linux_amd64.deb 2025-11-17 23.3 MB
syft_1.38.0_linux_s390x.deb 2025-11-17 22.5 MB
syft_1.38.0_linux_arm64.deb 2025-11-17 21.4 MB
syft_1.38.0_linux_ppc64le.deb 2025-11-17 21.3 MB
syft_1.38.0_linux_ppc64le.rpm 2025-11-17 22.0 MB
syft_1.38.0_linux_amd64.rpm 2025-11-17 24.1 MB
syft_1.38.0_linux_arm64.rpm 2025-11-17 22.0 MB
syft_1.38.0_linux_s390x.rpm 2025-11-17 23.6 MB
syft_1.38.0_darwin_amd64.tar.gz 2025-11-17 24.2 MB
syft_1.38.0_darwin_arm64.tar.gz 2025-11-17 22.2 MB
syft_1.38.0_windows_amd64.zip 2025-11-17 23.9 MB
syft_1.38.0_windows_arm64.zip 2025-11-17 21.6 MB
syft_1.38.0_linux_amd64.tar.gz 2025-11-17 23.3 MB
syft_1.38.0_linux_arm64.tar.gz 2025-11-17 21.3 MB
syft_1.38.0_linux_ppc64le.tar.gz 2025-11-17 21.2 MB
syft_1.38.0_linux_s390x.tar.gz 2025-11-17 22.4 MB
README.md 2025-11-17 1.8 kB
v1.38.0 source code.tar.gz 2025-11-17 6.7 MB
v1.38.0 source code.zip 2025-11-17 8.1 MB
Totals: 30 Items   377.4 MB 13

Added Features

  • add support for cataloging GGUF models [#4184 #4279 @spiffcs]
  • Support scanning a list of CPEs [#3890 #4207 @chovanecadam]
  • Syft does not detect Elixir binary on system [#4333 #4334 @rezmoss]

Bug Fixes

  • Support extras statements in Python PDM cataloger [#4352 @wagoodman]
  • Preserve --from argument order [#4350 @wagoodman]
  • SBOM generated by Syft 1.28 contains license elements missing id or name (causing CycloneDX parser error) [#4363]
  • empty PURL output in dependency snapshot format breaks sbom-action [#4311]
  • Interface includes constraint elements, can only be used in type parameters [#4346]
  • Upgrade github.com/nwaples/rardecode@v1.1.3 to 2.2.1 [#4338]
  • Upgrade to Golang 1.25.4 [#4341]

Additional Changes

  • migrate syft to use mholt/archives instead of anchore fork [#4029 @Rupikz]
  • Add license enrichment from pypi to python packages [#4295 @timols]
  • license file search [#4327 @kzantow]

(Full Changelog)

Source: README.md, updated 2025-11-17