Skip to content

Output Formats

Jump to bottom
Alan Pope edited this page May 17, 2024 · 1 revision

Output formats

The output format for Syft is configurable as well using the -o (or --output) option:

syft <image> -o <format>

Where the formats available are:

  • syft-json: Use this to get as much information out of Syft as possible!
  • syft-text: A row-oriented, human-and-machine-friendly output.
  • cyclonedx-xml: A XML report conforming to the CycloneDX 1.4 specification.
  • cyclonedx-json: A JSON report conforming to the CycloneDX 1.4 specification.
  • spdx-tag-value: A tag-value formatted report conforming to the SPDX 2.3 specification.
  • spdx-tag-value@2.2: A tag-value formatted report conforming to the SPDX 2.2 specification.
  • spdx-json: A JSON report conforming to the SPDX 2.3 JSON Schema.
  • spdx-json@2.2: A JSON report conforming to the SPDX 2.2 JSON Schema.
  • github-json: A JSON report conforming to GitHub's dependency snapshot format.
  • syft-table: A columnar summary (default).
  • template: Lets the user specify the output format. See "Using templates" below.
Clone this wiki locally