Download Latest Version syft_1.55.0_windows_amd64.zip (30.0 MB) Google Add to Preferred Sources
Home / v1.55.0
Name Modified Size InfoDownloads / Week
Parent folder
syft_1.55.0_checksums.txt 2026-10-19 2.7 kB
0
syft_1.55.0_checksums.txt.sigstore.json 2026-10-19 10.5 kB
0
syft_1.55.0_darwin_amd64.sbom 2026-10-19 279.5 kB
0
syft_1.55.0_darwin_arm64.sbom 2026-10-19 279.5 kB
0
syft_1.55.0_linux_amd64.sbom 2026-10-19 302.1 kB
0
syft_1.55.0_linux_arm64.sbom 2026-10-19 302.1 kB
0
syft_1.55.0_linux_ppc64le.sbom 2026-10-19 302.7 kB
0
syft_1.55.0_linux_riscv64.sbom 2026-10-19 301.7 kB
0
syft_1.55.0_linux_s390x.sbom 2026-10-19 302.1 kB
2 2 weekly downloads
syft_1.55.0_windows_amd64.sbom 2026-10-19 288.3 kB
2 2 weekly downloads
syft_1.55.0_windows_arm64.sbom 2026-10-19 288.3 kB
0
syft_1.55.0_linux_amd64.deb 2026-10-19 31.2 MB
0
syft_1.55.0_linux_arm64.deb 2026-10-19 28.5 MB
0
syft_1.55.0_linux_s390x.deb 2026-10-19 30.1 MB
0
syft_1.55.0_linux_arm64.tar.gz 2026-10-19 28.5 MB
0
syft_1.55.0_darwin_amd64.tar.gz 2026-10-19 30.7 MB
0
syft_1.55.0_darwin_arm64.tar.gz 2026-10-19 28.1 MB
0
syft_1.55.0_linux_amd64.rpm 2026-10-19 31.1 MB
1 1 weekly downloads
syft_1.55.0_linux_amd64.tar.gz 2026-10-19 31.2 MB
4 4 weekly downloads
syft_1.55.0_linux_arm64.rpm 2026-10-19 28.3 MB
0
syft_1.55.0_linux_ppc64le.deb 2026-10-19 28.5 MB
0
syft_1.55.0_linux_ppc64le.rpm 2026-10-19 28.3 MB
0
syft_1.55.0_linux_ppc64le.tar.gz 2026-10-19 28.5 MB
0
syft_1.55.0_linux_riscv64.deb 2026-10-19 29.6 MB
0
syft_1.55.0_linux_riscv64.rpm 2026-10-19 29.5 MB
0
syft_1.55.0_linux_riscv64.tar.gz 2026-10-19 29.6 MB
0
syft_1.55.0_linux_s390x.rpm 2026-10-19 30.0 MB
0
syft_1.55.0_linux_s390x.tar.gz 2026-10-19 30.1 MB
0
syft_1.55.0_windows_amd64.zip 2026-10-19 30.0 MB
49 49 weekly downloads
syft_1.55.0_windows_arm64.zip 2026-10-19 27.0 MB
7 7 weekly downloads
README.md 2026-10-19 4.6 kB
0
v1.55.0 source code.tar.gz 2026-10-19 7.6 MB
0
v1.55.0 source code.zip 2026-10-19 9.4 MB
0
Totals: 33 Items   578.4 MB 65

Added Features

  • Add support for scanning IPK packages using the deb-archive-cataloger [PR #5111 @skyhisi]

Bug Fixes

  • Pin Gguff lib to prevent dropping packages [PR #5447 @spiffcs]
  • Licensing: copyright holder missing, needed for Debian packaging [Issue #5394] [PR #5414 @wagoodman]
  • Syft cli.Command() panics when invoked multiple times [Issue #2285] [PR #5386 @JasonMetal]

Additional Changes

  • bump go-make module and action together [PR #5415 @wagoodman]

Dependencies

49 dependency changes (46 updated, 1 added, 2 removed). 5 vulnerabilities remediated.

🟢 Remediated (5)

Updated (46 packages) - cloud.google.com/go/auth `v0.23.2` → `v0.23.3` - cloud.google.com/go/compute/metadata `v0.9.0` → `v0.9.1` - cloud.google.com/go/storage `v1.65.1` → `v1.68.0` - github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp `v1.33.0` → `v1.34.0` - github.com/aws/aws-sdk-go-v2 `v1.44.0` → `v1.47.1` - github.com/aws/aws-sdk-go-v2/config `v1.32.40` → `v1.33.6` - github.com/aws/aws-sdk-go-v2/credentials `v1.19.39` → `v1.20.6` - github.com/aws/aws-sdk-go-v2/feature/ec2/imds `v1.18.40` → `v1.20.1` - github.com/aws/aws-sdk-go-v2/internal/configsources `v1.4.40` → `v1.5.4` - github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 `v2.7.40` → `v2.8.4` - github.com/aws/aws-sdk-go-v2/internal/v4a `v1.4.41` → `v1.5.4` - github.com/aws/aws-sdk-go-v2/service/internal/checksum `v1.10.0` → `v1.11.5` - github.com/aws/aws-sdk-go-v2/service/internal/presigned-url `v1.13.40` → `v1.14.4` - github.com/aws/aws-sdk-go-v2/service/internal/s3shared `v1.19.41` → `v1.20.4` - github.com/aws/aws-sdk-go-v2/service/s3 `v1.108.0` → `v1.114.0` - github.com/aws/aws-sdk-go-v2/service/signin `v1.6.0` → `v1.10.1` - github.com/aws/aws-sdk-go-v2/service/sso `v1.34.0` → `v1.38.1` - github.com/aws/aws-sdk-go-v2/service/ssooidc `v1.39.0` → `v1.43.1` - github.com/aws/aws-sdk-go-v2/service/sts `v1.46.0` → `v1.51.1` - github.com/github/go-spdx/v2 `v2.7.0` → `v2.7.1` - github.com/go-git/go-billy/v5 `v5.9.1` → `v5.9.2` - github.com/go-git/go-git/v5 `v5.19.2` → `v5.19.3` - github.com/google/s2a-go `v0.1.9` → `v0.1.10` - github.com/googleapis/enterprise-certificate-proxy `v0.3.20` → `v0.3.22` - github.com/googleapis/gax-go/v2 `v2.24.0` → `v2.24.1` - github.com/gookit/color `v1.6.1` → `v1.6.2` - github.com/gpustack/gguf-parser-go `v0.26.3` → `v0.26.4` - github.com/hashicorp/go-getter `v1.8.9` → `v1.8.10` - github.com/pb33f/ordered-map/v2 `v2.3.1` → `v2.3.2` - github.com/pjbgf/sha1cd `v0.6.0` → `v0.7.0` - github.com/spiffe/go-spiffe/v2 `v2.7.0` → `v2.8.1` - golang.org/x/crypto `v0.57.0` → `v0.58.0` - golang.org/x/net `v0.59.0` → `v0.61.0` **(🟢 remediated [GO-2026-6603](https://go.dev/cl/847185), [GO-2026-6610](https://go.dev/cl/835145), [GO-2026-6611](https://go.dev/cl/847186), [GO-2026-6612](https://go.dev/cl/847187), [GO-2026-6617](https://go.dev/cl/847188))** - golang.org/x/oauth2 `v0.36.0` → `v0.37.0` - golang.org/x/sync `v0.23.0` → `v0.24.0` - golang.org/x/sys `v0.48.0` → `v0.49.0` - golang.org/x/term `v0.46.0` → `v0.47.0` - golang.org/x/text `v0.42.0` → `v0.43.0` - golang.org/x/tools `v0.50.0` → `v0.51.0` - google.golang.org/api `v0.294.0` → `v0.299.0` - google.golang.org/genproto/googleapis/rpc `v0.0.0-da73d73` → `v0.0.0-b142276` - google.golang.org/grpc `v1.83.2` → `v1.84.0` - modernc.org/cc/v4 `v4.29.2` → `v4.29.7` - modernc.org/ccgo/v4 `v4.35.0` → `v4.36.1` - modernc.org/libc `v1.75.7` → `v1.77.1` - modernc.org/sqlite `v1.59.0` → `v1.60.1`
Added (1 package) - github.com/pb33f/go-yaml `v0.1.0`
Removed (2 packages) - github.com/klauspost/cpuid/v2 `v2.3.0` - go.yaml.in/yaml/v4 `v4.0.0-rc.2`

(Full Changelog)

Source: README.md, updated 2026-10-19