The first of those tools to be released are Syft and Grype. Syft analyzes container images and filesystems, then creates a bill of materials, which is a record of all operating system packages and ...