search

anchore / syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Apache License 2.0
6.19k stars 571 forks source link

Add asdf support #1104

Open sambhav opened 2 years ago

sambhav commented 2 years ago

What would you like to be added:

syft should add support for asdf. asdf is a generic package manager that can be used to install various tools. See https://github.com/asdf-vm/asdf

Why is this needed:

Using this syft may be able to capture versions of tools that are not currently captured by syft. Things like the version of python, ruby, node etc.

Additional context:

sambhav commented 2 years ago

See https://github.com/asdf-vm/asdf-plugins for the full list of binaries supported by asdf.

kzantow commented 1 year ago

This seems like a great idea -- we welcome PRs!

wagoodman commented 1 year ago

For anyone picking this up, it sounds like this would be a good fit for cataloging directories which look for declarations of packages and not container images which look for installations of packages.