GitHub repository: w3security/syft
Primary language: Go
Description: CLI tool and library for generating a Software Bill of Materials from container images and filesystems