syft

FIPS 140-3Security

Syft is a CLI tool and Go library for generating Software Bill of Materials (SBOM) from container images and filesystems with support for multiple output formats and package ecosystems.

Variant

Image version	Type	Compliance	Pkg mgr	Shell	User	Size	Pushed	Vulns	Health
Distroless1.51.0-distroless-26be285e9b84	FIPS	FIPSSigned	—	—	—	53.9 MB	Aug 24, 2026	High	C64
Distroless1.51.0-distroless-c9d50ff19615	FIPS	FIPSSigned	—	—	—	53.8 MB	Aug 24, 2026	None	A100
Alpine1.51.0-4a3c02293f05	Base	CISSigned	—	—	nonroot (65532)	25.7 MB	Aug 24, 2026	None	A100
Alpine1.51.0-alpine3.23-c6ef016dea18	Base	CISSigned	—	—	nonroot (65532)	25.7 MB	Aug 24, 2026	None	A100
Debian1.51.0-ff5211f4bc4c	Base	CISSigned	—	—	nonroot (65532)	25.9 MB	Aug 24, 2026	None	A100
Alpine1.51.0-alpine3.23-d3613f171173	Base	CISSigned	—	—	nonroot (65532)	25.6 MB	Aug 18, 2026	None	A100
Debian1.51.0-907ed282d555	Base	CISSigned	—	—	nonroot (65532)	25.8 MB	Aug 18, 2026	None	A100
Distroless1.50.0-distroless-44769d90297c	FIPS	FIPSSigned	—	—	—	53.8 MB	Aug 13, 2026	High	A92
Distroless1.51.0-distroless-b000632aa0fb	FIPS	FIPSSigned	—	—	—	53.8 MB	Aug 13, 2026	None	A100
Alpine1.51.0-43f29062f6ac	Base	CISSigned	—	—	nonroot (65532)	25.6 MB	Aug 12, 2026	None	A100
Alpine1.51.0-alpine3.23-10381226a2ac	Base	CISSigned	—	—	nonroot (65532)	25.6 MB	Aug 12, 2026	None	A100
Debian1.51.0-3178899e63cf	Base	CISSigned	—	—	nonroot (65532)	25.8 MB	Aug 12, 2026	None	A100
Debian1.50.0-4e08bc95716a	Base	CISSigned	—	—	nonroot (65532)	25.8 MB	Aug 12, 2026	None	A100
Alpine1.50.0-cd326366833e	Base	CISSigned	—	—	nonroot (65532)	25.5 MB	Aug 10, 2026	None	A100
Alpine1.50.0-alpine3.23-6824ec782d55	Base	CISSigned	—	—	nonroot (65532)	25.5 MB	Aug 10, 2026	None	A100
Debian1.50.0-3484ac184dd2	Base	CISSigned	—	—	nonroot (65532)	25.8 MB	Aug 10, 2026	None	A100