Syft

syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems.

Runs as syft|macOS, Linux, Windows|github.com

Open form in Otty otty.toml

Command form

ai-draft · 1 task · 3 fields

Scan a container image, directory or archive and print or write an SBOM. Only the output format and source-type options are covered.

Opens the form; the finished command lands at your prompt, unrun

Run in Otty

otty gui syft

Generate an SBOMExample values, fixed in this page — nothing here reaches a terminal

Basic

Scan target*

string

Output format

string

TasksEach one presets the form for one job

Scan a target

sourceoutput

ParametersOnly these flags are editable in the form

Scan target

Image reference, directory or archive, e.g. alpine:latest or ./my-project.
string · positional 0

Output format

Format, optionally with =file, e.g. spdx-json=./spdx.json.
string · repeatable

-ocyclonedx-jsonspdx-json

Source type

string

--fromcontainers-storage

SourcesEvery flag above is checked against these

s

syft alpine:latest syft ./my-project syft <image> -o cyclonedx-json syft <image> -o spdx-json=./spdx.json -o cyclonedx-json=./cdx.json syft --from containers-storage localhost/myimage:latest

help2026-10-27

github.com

Before it fills your prompt, Otty checks the installed syft against its version. A form that does not match your version is not offered.