Sign me up Login

Details about package syft

Name:	syft
Uploader:	Juan Manuel Méndez Rey <vejeta@gmail.com> (Debian QA page)
Description:	syft - CLI tool for generating Software Bill of Materials (SBOM)

Package uploads

Upload #1

Information

Version:	1.40.0+ds-1
Uploaded:	2026-01-09 22:46
Source package:	syft_1.40.0+ds-1.dsc
Distribution:	unstable
Section:	devel
Priority:	optional
Homepage:	https://github.com/anchore/syft
Vcs-Browser:	https://salsa.debian.org/mendezr/syft
Vcs-Git:	https://salsa.debian.org/mendezr/syft.git
Closes bugs:	#1124819

Changelog

 syft (1.40.0+ds-1) unstable; urgency=low
 .
   * Initial release (Closes: #1124819)

QA information

–
Package uses debhelper-compat

Debhelper compatibility level 13

–

Package is the latest upstream version

Local:	1.40.0+ds
Upstream:	1.40.0
Url:	https://github.com/anchore/syft/archive/refs/tags/v1.40.0.tar.gz

–
Package is not native

Format: 3.0 (quilt)
–
"Maintainer" email is the same as the uploader
–
Package has lintian informational tags
syft source
- I missing-built-using-field-for-golang-package
  - (in section for syft) [debian/control:16]
- P maintainer-manual-page
  - [debian/syft.1]
- X debian-watch-does-not-check-openpgp-signature
  - [debian/watch]
- X prefer-uscan-symlink
  - filenamemangle s/.+\/v?(\d\S+)\.tar\.gz/syft-$1\.tar\.gz/ [debian/watch:3]
- X very-long-line-length-in-source-file
  - 1032 > 512 [syft/pkg/cataloger/java/parse_jvm_release.go:40]
  - 1044 > 512 [vendor/golang.org/x/crypto/ssh/kex.go:35]
  - 1077 > 512 [vendor/golang.org/x/text/unicode/norm/tables9.0.0.go:5655]
  - 1098 > 512 [vendor/golang.org/x/text/unicode/norm/tables10.0.0.go:5678]
  - 1126 > 512 [vendor/golang.org/x/text/unicode/norm/tables11.0.0.go:5708]
  - 1140 > 512 [vendor/golang.org/x/text/unicode/norm/tables12.0.0.go:5717]
  - 1182 > 512 [vendor/golang.org/x/text/unicode/norm/tables13.0.0.go:5742]
  - 1191 > 512 [syft/pkg/cataloger/redhat/parse_rpm_archive_test.go:191]
  - 1223 > 512 [vendor/golang.org/x/text/unicode/norm/tables15.0.0.go:5859]
  - 1229 > 512 [vendor/modernc.org/libc/musl_netbsd_arm.go:1]
  - 1234 > 512 [vendor/modernc.org/libc/musl_netbsd_amd64.go:1]
  - 1245 > 512 [vendor/github.com/ProtonMail/go-crypto/openpgp/packet/private_key_test_data.go:12]
  - 1246 > 512 [vendor/github.com/ProtonMail/go-crypto/openpgp/packet/public_key_test_data.go:24]
  - 1296 > 512 [syft/pkg/cataloger/internal/cpegenerate/generate_test.go:289]
  - 1309 > 512 [vendor/modernc.org/libc/musl_openbsd_386.go:1]
  - 1311 > 512 [vendor/modernc.org/libc/musl_freebsd_arm.go:1]
  - 1312 > 512 [vendor/modernc.org/libc/musl_freebsd_386.go:1]
  - 1313 > 512 [vendor/modernc.org/libc/musl_openbsd_amd64.go:1]
  - 1314 > 512 [vendor/modernc.org/libc/musl_openbsd_arm64.go:1]
  - 1316 > 512 [vendor/modernc.org/libc/musl_freebsd_amd64.go:1]
  - 1316 > 512 [vendor/modernc.org/libc/musl_freebsd_arm64.go:1]
  - 1480 > 512 [vendor/github.com/therootcompany/xz/LICENSE:63]
  - 1494 > 512 [vendor/modernc.org/libc/musl_darwin_amd64.go:1]
  - 1495 > 512 [vendor/modernc.org/libc/musl_darwin_arm64.go:1]
  - 1731 > 512 [syft/pkg/cataloger/golang/parse_go_binary_test.go:1220]
  - 1737 > 512 [vendor/github.com/sourcegraph/conc/README.md:6]
  - 1811 > 512 [vendor/golang.org/x/net/idna/tables9.0.0.go:2353]
  - 1853 > 512 [vendor/golang.org/x/net/idna/tables10.0.0.go:2374]
  - 1937 > 512 [vendor/golang.org/x/net/idna/tables11.0.0.go:2374]
  - 1957 > 512 [vendor/modernc.org/libc/musl_illumos_amd64.go:1]
  - 1957 > 512 [vendor/modernc.org/libc/musl_linux_mips64le.go:1]
  - 1983 > 512 [syft/format/syftjson/model/source_test.go:70]
  - 1993 > 512 [vendor/golang.org/x/net/idna/tables12.0.0.go:2374]
  - 2049 > 512 [vendor/golang.org/x/net/idna/tables13.0.0.go:2538]
  - 2126 > 512 [vendor/golang.org/x/net/idna/tables15.0.0.go:2655]
  - 2204 > 512 [vendor/golang.org/x/tools/internal/typesinternal/errorcode_string.go:162]
  - 2794 > 512 [vendor/github.com/xeipuuv/gojsonschema/draft.go:60]
  - 3016 > 512 [vendor/github.com/shopspring/decimal/const.go:8]
  - 32853 > 512 [vendor/modernc.org/libc/ccgo_linux_loong64.go:1]
  - 32884 > 512 [vendor/modernc.org/libc/ccgo_linux_riscv64.go:1]
  - 32928 > 512 [vendor/modernc.org/libc/ccgo_linux_arm64.go:1]
  - 32944 > 512 [vendor/modernc.org/libc/ccgo_linux_amd64.go:1]
  - 32962 > 512 [vendor/modernc.org/libc/ccgo_linux_s390x.go:1]
  - 32976 > 512 [vendor/modernc.org/libc/ccgo_linux_ppc64le.go:1]
  - 34760 > 512 [vendor/modernc.org/libc/ccgo_linux_arm.go:1]
  - 34886 > 512 [vendor/modernc.org/libc/ccgo_linux_386.go:1]
  - 43342 > 512 [vendor/modernc.org/sqlite/lib/sqlite_netbsd_amd64.go:151229]
  - 44073 > 512 [vendor/modernc.org/sqlite/lib/sqlite_openbsd_amd64.go:153057]
  - 44073 > 512 [vendor/modernc.org/sqlite/lib/sqlite_openbsd_arm64.go:153062]
  - 44082 > 512 [vendor/modernc.org/sqlite/lib/sqlite_freebsd_386.go:153538]
  - 44082 > 512 [vendor/modernc.org/sqlite/lib/sqlite_freebsd_arm.go:153632]
  - 46575 > 512 [vendor/modernc.org/sqlite/lib/sqlite_freebsd_amd64.go:221557]
  - 46575 > 512 [vendor/modernc.org/sqlite/lib/sqlite_freebsd_arm64.go:221570]
  - 46577 > 512 [vendor/modernc.org/sqlite/lib/sqlite_linux_386.go:221706]
  - 46577 > 512 [vendor/modernc.org/sqlite/lib/sqlite_linux_amd64.go:221719]
  - 46577 > 512 [vendor/modernc.org/sqlite/lib/sqlite_linux_arm.go:222003]
  - 46577 > 512 [vendor/modernc.org/sqlite/lib/sqlite_linux_arm64.go:221709]
  - 46577 > 512 [vendor/modernc.org/sqlite/lib/sqlite_linux_ppc64le.go:221756]
  - 46577 > 512 [vendor/modernc.org/sqlite/lib/sqlite_linux_riscv64.go:221702]
  - 46577 > 512 [vendor/modernc.org/sqlite/lib/sqlite_linux_s390x.go:221656]
  - 46605 > 512 [vendor/modernc.org/sqlite/lib/sqlite_linux_loong64.go:221808]
  - 47058 > 512 [vendor/modernc.org/sqlite/lib/sqlite_darwin_amd64.go:227728]
  - 47058 > 512 [vendor/modernc.org/sqlite/lib/sqlite_darwin_arm64.go:227301]
  - 48212 > 512 [vendor/modernc.org/sqlite/lib/sqlite_windows.go:295010]
  - 48212 > 512 [vendor/modernc.org/sqlite/lib/sqlite_windows_386.go:294902]
  - 514 > 512 [vendor/cloud.google.com/go/auth/CHANGES.md:119]
  - 524 > 512 [vendor/github.com/gpustack/gguf-parser-go/zz_generated.gguffiletype.stringer.go:53]
  - 5266 > 512 [vendor/github.com/ProtonMail/go-crypto/openpgp/keys_test_data.go:6]
  - 527 > 512 [syft/pkg/cataloger/java/parse_java_manifest_test.go:317]
  - 528 > 512 [vendor/github.com/buger/jsonparser/README.md:340]
  - 528 > 512 [vendor/golang.org/x/sys/windows/types_windows.go:634]
  - 537 > 512 [vendor/github.com/smallnest/ringbuffer/README.md:3]
  - 546 > 512 [vendor/github.com/adrg/xdg/README.md:173]
  - 552 > 512 [internal/capabilities/appconfig.yaml:46]
  - 5525 > 512 [vendor/github.com/ProtonMail/go-crypto/openpgp/read_write_test_data.go:25]
  - 559 > 512 [vendor/github.com/klauspost/compress/README.md:181]
  - 561 > 512 [vendor/github.com/go-restruct/restruct/README.md:1]
  - 561 > 512 [vendor/github.com/google/go-containerregistry/pkg/authn/README.md:193]
  - 570 > 512 [vendor/github.com/rivo/uniseg/README.md:114]
  - 571 > 512 [vendor/modernc.org/libc/libc32.go:64]
  - 571 > 512 [vendor/modernc.org/libc/libc64.go:62]
  - 572 > 512 [vendor/github.com/invopop/jsonschema/README.md:195]
  - 595 > 512 [vendor/github.com/spf13/cobra/CONDUCT.md:4]
  - 598 > 512 [vendor/github.com/anchore/packageurl-go/README.md:3]
  - 606 > 512 [vendor/github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric/README.md:15]
  - 609 > 512 [vendor/github.com/go-restruct/restruct/expr/tokenkind_string.go:66]
  - 618 > 512 [vendor/github.com/pkg/errors/README.md:1]
  - 626 > 512 [vendor/golang.org/x/text/internal/language/tables.go:3487]
  - 648 > 512 [vendor/github.com/Microsoft/hcsshim/README.md:5]
  - 649 > 512 [vendor/github.com/hashicorp/hcl/v2/CHANGELOG.md:172]
  - 662 > 512 [vendor/github.com/google/go-containerregistry/pkg/v1/remote/transport/README.md:22]
  - 670 > 512 [vendor/github.com/mholt/archives/README.md:244]
  - 671 > 512 [vendor/modernc.org/libc/musl_windows_386.go:1]
  - 681 > 512 [vendor/github.com/henvic/httpretty/README.md:2]
  - 694 > 512 [vendor/github.com/containerd/containerd/README.md:25]
  - 696 > 512 [vendor/modernc.org/libc/musl_windows_amd64.go:1]
  - 697 > 512 [vendor/modernc.org/libc/musl_windows_arm64.go:1]
  - 710 > 512 [vendor/github.com/hashicorp/hcl/v2/hclsyntax/token_type_string.go:68]
  - 715 > 512 [README.md:81]
  - 756 > 512 [vendor/github.com/acobaugh/osrelease/LICENSE:11]
  - 8192 > 512 [vendor/modernc.org/sqlite/embed.db:1]
  - 8192 > 512 [vendor/modernc.org/sqlite/embed2.db:1]
  - 828 > 512 [vendor/modernc.org/libc/libc_freebsd_amd64.go:948]
  - 916 > 512 [vendor/github.com/klauspost/compress/flate/inflate.go:37]
  - 940 > 512 [vendor/cloud.google.com/go/storage/CHANGES.md:736]
  - 957 > 512 [vendor/github.com/aws/aws-sdk-go-v2/config/CHANGELOG.md:218]
  - 957 > 512 [vendor/github.com/aws/aws-sdk-go-v2/service/internal/checksum/CHANGELOG.md:144]
  - 957 > 512 [vendor/github.com/aws/aws-sdk-go-v2/service/s3/CHANGELOG.md:262]
–
Package closes ITP bug
- syft:
  - #1124819 (Wishlist, ITP): ITP: syft -- CLI tool for generating Software Bill of Materials from container images and filesystems
–
Package is not in Debian

–

d/copyright is in DEP5 format

Upstream Contact:	Anchore, Inc. <support@anchore.com>
Licenses:	Expat, BSD-2-clause, 0BSD, ISC, CC0-1.0, MPL-2.0, Unlicense, BSD-3-clause, Apache-2.0

Comments

No comments