GitHub repository: Be-Secure/syft
Description: CLI tool and library for generating a Software Bill of Materials from container images and filesystems