github.com/tern-tools/tern (go): Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more. 
Keywords: compliance|containers|dependencies|docker|metadata-extraction|open-source|oss-compliance|python|risk-management|sbom|software-composition-analysis|spdx|supply-chain-security|tool