Syft is a CLI tool and library for generating a Software Bill of Materials
(SBOM) from container images and filesystems.
It supports multiple SBOM formats including CycloneDX and SPDX and can scan
containers, directories, and archives to identify installed packages.
Syft is developed by Anchore and is commonly used in software supply-chain
security workflows.
security/syft: fix fetch
The port tries to fetch google.golang.org/genproto and its submodules
in different versions for some reason. This confuses our framework to
the point where it cannot fetch the port.
Fix the build by fetching the same (newer) version for both parent and
child. The versions are ~2 months apart, which should pose no problem.
Also mark as only for aarch64, amd64 due to use of modernc.org/sqlite
Approved by: portmgr (build fix blanket)
MFH: 2026Q2
security/syft: New port
Syft is a CLI tool and library for generating a Software Bill of Materials
(SBOM) from container images and filesystems.
It supports multiple SBOM formats including CycloneDX and SPDX and can scan
containers, directories, and archives to identify installed packages.
Syft is developed by Anchore and is commonly used in software supply-chain
security workflows.
Sponsored by: OTTRIA
