llnl/Surfactant

View on GitHub

Modular framework for file information extraction and dependency analysis to generate accurate SBOMs

Stars: 43
Forks: 28
Open beginner issues: 0
Indexed issues: 55

Dominant language: Python
License: MIT
Last GitHub push: Aug 17, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted good first issue
PR merge metrics: No merged PRs in 30d

Beginner friendly Everything

Open All

55 open issues indexed

Show PluginConf Options in TUI Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 45/100

llnl/Surfactant#638 · Opened Jun 17, 2026
Qilingexec Reduce Code Duplication Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 55/100

llnl/Surfactant#637 · Opened Jun 17, 2026
Support setting a default list of SBOM authors Open

Difficulty 3/5 1-2 days Newbie friendliness 66/100

llnl/Surfactant#619 · Opened May 12, 2026
Suggest changes to CyTRICS schema Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

llnl/Surfactant#618 · Opened May 12, 2026
In-memory extraction and processing of files Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

llnl/Surfactant#614 · Opened Apr 29, 2026
Firmware related file formats and components Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

llnl/Surfactant#600 · Opened Mar 23, 2026
Update SBOMVisualizer to use graph representation of SBOM Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

llnl/Surfactant#599 · Opened Mar 23, 2026
Explore recognizing HTML/CSS/files embedded in the data segment of a binary Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

llnl/Surfactant#598 · Opened Mar 23, 2026
Update Surfactant to output CyTRICS SBOMs in v1.x schema format Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

llnl/Surfactant#597 · Opened Mar 23, 2026
Add rpmfile config options Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

llnl/Surfactant#569 · Opened Jan 14, 2026
Provide infoextractor name in return value of extract_file_info Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 45/100

llnl/Surfactant#555 · Opened Dec 4, 2025
Use mimetypes as identifiers Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

llnl/Surfactant#536 · Opened Nov 6, 2025
Use lazy imported modules to improve startup performance Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

llnl/Surfactant#535 · Opened Nov 6, 2025
Plugin subcommand doesn't work with venv created by uv Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

llnl/Surfactant#515 · Opened Oct 10, 2025
Set default for output directories in TUI Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

llnl/Surfactant#514 · Opened Oct 10, 2025
Explore SBOM Analysis Over Remote File Systems via SSH Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

llnl/Surfactant#480 · 1 comment · Opened Aug 21, 2025
Global settings can influence tests Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

llnl/Surfactant#470 · Opened Aug 4, 2025
Drop support for raw_dict initialization Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

llnl/Surfactant#447 · Opened Jul 10, 2025
Decompress multiple concatenated streams in GZIP files Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

llnl/Surfactant#406 · Opened May 13, 2025
Python gzip library does not properly handle gzip files that have trailing garbage bytes Open

bug

llnl/Surfactant#389 · 1 comment · 1 assignee · Opened Apr 16, 2025
Add GPL warning before installing certain pattern databases Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 35/100

llnl/Surfactant#369 · Opened Mar 12, 2025
Support user-provided pattern databases Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 30/100

llnl/Surfactant#368 · Opened Mar 12, 2025
Add tests to validate correct output of CycloneDX/SPDX SBOM formats Open

enhancement testing

Difficulty 4/5 3-5 days Newbie friendliness 35/100

llnl/Surfactant#331 · Opened Jan 27, 2025
Figure out binary wheels for ssdeep and tlsh Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

llnl/Surfactant#324 · Opened Jan 16, 2025
Update CI test matrix to include new Python versions Open

testing

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

llnl/Surfactant#305 · Opened Dec 17, 2024
Process files in parallel Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

llnl/Surfactant#303 · Opened Dec 16, 2024
Address Repo-Reviewer recommendations Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

llnl/Surfactant#290 · Opened Nov 24, 2024
Add order-agnostic SBOM comparison utility Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

llnl/Surfactant#280 · Opened Nov 5, 2024
Allow ContextEntry to have fields to control plugins Open

enhancement help wanted

Difficulty 4/5 3-5 days Newbie friendliness 35/100

llnl/Surfactant#264 · Opened Oct 7, 2024
Add option for using paths relative to Surfactant specimen config file Open

enhancement help wanted

Difficulty 3/5 1-2 days Newbie friendliness 45/100

llnl/Surfactant#258 · Opened Sep 16, 2024
Add ability to convert Motorola S-Record and Intel Hex files into binary files Open

enhancement help wanted

llnl/Surfactant#257 · 2 assignees · Opened Sep 16, 2024
Merge throws an error with CycloneDX Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

llnl/Surfactant#243 · 1 comment · Opened Aug 19, 2024
Support for config files that differ for copies of the same file/symlink Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

llnl/Surfactant#235 · 1 comment · Opened Jul 30, 2024
Revisit information available from Syft Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 42/100

llnl/Surfactant#232 · Opened Jul 23, 2024
Input/Output format detection based on file extension Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

llnl/Surfactant#197 · 1 comment · Opened May 9, 2024
Gather Docker image information Open

enhancement

llnl/Surfactant#195 · 1 assignee · Opened May 7, 2024
Gather data on Extended Attributes and Alternate Data Streams/File Forks Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

llnl/Surfactant#180 · 1 comment · Opened Apr 11, 2024
Determine how to handle polyglot files Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

llnl/Surfactant#179 · 1 comment · Opened Apr 11, 2024
Symlinks don't appear in containerPaths Open

bug

Difficulty 5/5 Over a week Newbie friendliness 20/100

llnl/Surfactant#177 · Opened Apr 11, 2024
JSON schema for validation Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

llnl/Surfactant#161 · 4 comments · Opened Mar 20, 2024
Read in files once. Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

llnl/Surfactant#154 · 1 comment · 1 reaction · Opened Mar 6, 2024
Consider supporting protobom input/output format (or internal?) Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

llnl/Surfactant#151 · Opened Mar 1, 2024
Diffing Between SBOMs Open

enhancement testing

Difficulty 4/5 3-5 days Newbie friendliness 30/100

llnl/Surfactant#148 · 4 comments · 1 reaction · Opened Feb 21, 2024
Determine install prefix based on rpaths? Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

llnl/Surfactant#135 · Opened Feb 10, 2024
Investigate Cytoscape for visualizing SBOMs Open

llnl/Surfactant#129 · 4 comments · 1 assignee · Opened Feb 6, 2024
Support user config options for plugins Open

enhancement

llnl/Surfactant#100 · 1 comment · 1 assignee · Opened Dec 15, 2023
Plugin to get dynamic information from running a binary in a sandbox Open

plugins question

Difficulty 5/5 Over a week Newbie friendliness 25/100

llnl/Surfactant#99 · Opened Dec 15, 2023
Workflow UX enhancements for SBOMs from files in Windows installers Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

llnl/Surfactant#87 · Opened Dec 6, 2023
.NET cross-platform runtime behavior when supplying platform specific library names. Open

question

Difficulty 3/5 1-2 days Newbie friendliness 25/100

llnl/Surfactant#80 · 3 comments · Opened Nov 20, 2023
Add output writer for Graphviz DOT format Open

enhancement good first issue help wanted

Difficulty 3/5 1-2 days Newbie friendliness 38/100

llnl/Surfactant#71 · 1 comment · Opened Oct 29, 2023

llnl/Surfactant

Get new issues in your inbox