syft

Perform data science on data that remains in someone else's server

Scans Software Bill of Materials (SBOMs) for security vulnerabilities

The official Syft worker for Web and Node, built in Javascript

The official Syft worker for secure on-device machine learning

Example goreleaser + github actions config with keyless signing, SBOM generation, and attestations

The official Syft worker for iOS, built in Swift

Defines types for all Serde encoding across languages

Synthesizer of LTLf formula

Practical Cybersecurity Supply Chain Risk Management

Ansible role for 'syft'. Available on Ansible Galaxy.

Syft rules for bazel

A demonstration of how GoReleaser can help us to make software supply chain more secure by using bunch of tools such as cosign, syft, grype, slsa-provenance

Javascript worker for PySyft

A tiny job-scraping project to automating job hunting when employers aren't on indeed, built for my wife

SOON TO BE DEPRECATED - A library for encrypted, privacy preserving machine learning

AegisFlow is a threat-aware CI/CD pipeline that integrates real-time threat intelligence (AlienVault OTX), MITRE ATT&CK-based static analysis, and SBOM-driven CVE detection to automate secure software delivery.

Comment SBOM diffs as PR comments.

Middleware that helps to add redux action to the Rollbar.Telemetry

Container image with docker/helm/skopeo/dive/crictl/syft tools