anchore / anchore/syft

Catalog VM images directly

Open
#3,245 3 comments 1 reaction 0 assignees View on GitHub
enhancement new-source
Dominant language
Go
Stars
9.6k
Forks
962
Avg merge
23h 27m
Merged PRs (30d)
48

Description

(writing on the behalf of @westonsteimel )

It would be awesome to be able to point syft directly and more filesystem image types:

```
# search a VMDK disk image
syft ./my.vmdk

# fetch and catalog from an EBS snapshot
syft ami-0abcdef1234567890
```

_(these would also have their own schemes too, such as `vmdk` and `eds`)_

There are some interesting libs available for accessing [EBS images](https://github.com/masahiro331/go-ebs-file), parsing [ext4 filesystems](https://github.com/masahiro331/go-ext4-filesystem), as well as [xfs filesystems](https://github.com/masahiro331/go-xfs-filesystem).

Ideally we could use the existing stereoscope filetree/index capabilities but have custom syft `Source` objects to raise specific metadata about that source.

Contributor guide

Open the contributing guide

Research direction

Start by reviewing Syft's existing stereoscope filetree/index capabilities and Source objects. Investigate the linked EBS, ext4, and XFS libraries to determine how VMDK files and EBS snapshots could be accessed. Done means Syft can accept the proposed image inputs and expose source-specific metadata while cataloging their filesystems.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, go
Domain
cli, devtools, operating-systems
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.