syft

github.com ↗

A CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems.