You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
What would you like to be added:
Syft should recognize and catalog .far (Feature Archive) files as Java archives, in the same way it already supports .ear, .war, and .jar.
Why is this needed:
When scanning Java Sling applications, libraries packaged inside .far files are not currently detected. This results in incomplete scans and SBOMs that miss dependencies contained in these archives.