Syft

Syft is an open source tool to generate a Software Bill of Materials (SBOM) from a container image or filesystem. Created and maintained by https://mstdn.business/@anchore

GitHub: https://github.com/anchore/syft/
Forum: https://anchorecommunity.discourse.group/