Syft Archives - ITNotes

Home » Syft

Securing Software Supply Chain with SBOM: Hands-On Guide to Syft and Grype in CI/CD

November 1, 2026

Modern codebases consist of 80% open-source packages. Here is a practical guide to generating SBOMs with Syft and catching high-severity CVEs using Grype in GitHub Actions.

DevOps

Automating Software Bill of Materials (SBOM) with Syft and Grype: Securing CI/CD Supply Chains

October 26, 2026

Automate Software Bill of Materials (SBOM) generation and CVE detection using Syft and Grype. Learn how to catalog dependencies, scan without rebuilding images, and tame false positives in CI/CD pipelines.