Syft
Generate SPDX and CycloneDX software bills of materials from images and filesystems.
What’s included for free?
Syft is ongoing-free under Apache-2.0 with no provider image quota; analysis runs locally.
Where it runs: Self-hosted
Provider information ↗Checked 2026-11-01
Before you use it
Apache-2.0 covers Syft; its logo is CC-BY-4.0. Scanned software and output distribution retain separate obligations.
Provider terms can change. Check current pricing and usage rights before starting a project.