sbomlyze

(★ 24)

Git diff for SBOMs—compare CycloneDX, SPDX, and Syft documents, detect tampering, and gate CI.

File Explorer

  • .gitignore
  • .goreleaser.yml
  • .release-please-manifest.json
  • ACTION.md
  • action.yml
  • BETA.md
  • CHANGELOG.md
  • CONTRIBUTING.md
  • go.mod
  • go.sum
  • install.sh
  • LICENSE
  • Makefile
  • README.md
  • release-please-config.json
  • SECURITY.md

# Use via CDN

jsDelivr

jsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.

Command Glossary

Commands referenced in this DOCs, explained below.

🔍

brew install

View Details ▼

Install a Homebrew formula or cask.

brew install {{formula|cask}}

Install a formula/cask:

brew install {{[-s|--build-from-source]}} {{formula}}

Build and install a formula from source (dependencies will still be installed from bottles):

brew install {{[-n|--dry-run]}} {{formula|cask}}

Download the manifest, print what would be installed but don't actually install anything:

🔍

git clone

View Details ▼

Clone an existing repository.

git clone {{remote_repository_location}} {{path/to/directory}}

Clone an existing repository into a new directory (the default directory is the repository name):

git clone --recursive {{remote_repository_location}}

Clone an existing repository and its submodules:

git clone {{[-n|--no-checkout]}} {{remote_repository_location}}

Clone only the `.git` directory of an existing repository:

🔍

git diff

View Details ▼

Show changes to tracked files.

git diff

Show unstaged changes:

git diff HEAD

Show all uncommitted changes (including staged ones):

git diff --staged

Show only staged (added, but not yet committed) changes:

🔍

go build

View Details ▼

Compile Go sources.

go build {{path/to/main.go}}

Compile a 'package main' file (output will be the filename without extension):

go build -o {{path/to/binary}} {{path/to/source.go}}

Compile, specifying the output filename:

go build -o {{path/to/binary}} {{path/to/package}}

Compile a package:

🔍

go install

View Details ▼

Compile and install packages named by the import paths.

go install

Compile and install the current package:

go install {{path/to/package}}

Compile and install a specific local package:

go install {{golang.org/x/tools/gopls}}@{{latest}}

Install the latest version of a program, ignoring `go.mod` in the current directory:

🔍

go test

View Details ▼

Test Go packages (files have to end with `_test.go`).
Note: `./...` is a Go package pattern understood by Go tooling. It matches the current package and all packages recursively under the current directory.

go test

Test the package found in the current directory:

go test -v

[v]erbosely test the package in the current directory:

go test -v ./...

Test the packages in the current directory and all subdirectories:

🔍

syft

View Details ▼

Generate a Software Bill of Materials (SBOM) from container images and filesystems.

syft {{image:tag}}

Generate an SBOM from a container image:

syft {{path/to/directory}}

Generate an SBOM from a local directory:

syft {{path/to/archive.tar}}

Generate an SBOM from a container archive file:

🔍

apk

View Details ▼

Alpine Linux package management tool.

apk upgrade {{[-U|--update-cache]}}

Update repository indexes and upgrade all packages:

apk update

Only update repository indexes:

apk add {{package}}

Install a new package:

🔍

apt install

View Details ▼

Install packages for Debian-based distributions.

sudo apt install {{package}}

Install a package, or update it to the latest version:

sudo apt install {{[-V|--verbose-versions]}} {{package}}

Display verbose package version information during installation or update:

🔍

apt

View Details ▼

Package manager for Debian-based distributions.
Intended as a user-friendly alternative to `apt-get` for interactive use.
For equivalent commands in other package managers, see <https://wiki.archlinux.org/title/Pacman/Rosetta>.

sudo apt update

Update the list of available packages and versions (recommended before running other `apt` commands):

apt search {{package}}

Search packages by name or description:

apt list {{package}}

Search packages by name only (supports wildcards like `*`):

🔍

dnf install

View Details ▼

Install packages on Red Hat-based distributions.

sudo dnf {{[in|install]}} {{package1 package2 ...}}

Install packages by name:

sudo dnf {{[in|install]}} {{path/to/file}}

Install a package from a local file:

sudo dnf {{[in|install]}} {{https://example.com/package.rpm}}

Install a package from the internet:

🔍

xattr

View Details ▼

Utility to work with extended filesystem attributes.

xattr -l {{file}}

List key:value extended attributes for a given file:

xattr -w {{attribute_key}} {{attribute_value}} {{file}}

Write an attribute for a given file:

xattr -d {{com.apple.quarantine}} {{file}}

Delete an attribute from a given file:

🔍

replace

View Details ▼

Replace files.
See also: `robocopy`, `move`, `del`.

replace {{path\to\file_or_directory}} {{path\to\destination_directory}}

Replace the destination file with the one from the source directory:

replace {{path\to\file_or_directory}} {{path\to\destination_directory}} /a

Add files to the destination directory instead of replacing existing files:

replace {{path\to\file_or_directory}} {{path\to\destination_directory}} /p

Interactively copy multiple files, with a prompt before replacing or adding a destination file:

// repository documentation