GitHub repository: kairin/syft
Description: CLI tool and library for generating a Software Bill of Materials from container images and filesystems