Ansible Role: syft

This Ansible role installs syft on Debian/Ubuntu and EL systems by default. Syft is a command-line tool and Go library used to create a Software Bill of Materials (SBOM) from container images and file systems.

Requirements

No prerequisites are needed.

Role Variables

Here are the available variables (found in defaults/main.yml):

List of Variables:

syft_app: syft
syft_desired_state: present
syft_version: 1.11.1
syft_os: "{{ ansible_system | lower }}"
syft_architecture_map:
  amd64: amd64
  arm: arm64
  x86_64: amd64
  armv6l: armv6
  armv7l: armv7
  aarch64: arm64
  32-bit: "386"
  64-bit: amd64

# For Debian/Ubuntu
syft_debian_url: "https://github.com/anchore/{{ syft_app }}/releases/download/v{{ syft_version }}/{{ syft_app }}_{{ syft_version }}_{{ syft_os }}_{{ syft_architecture_map[ansible_architecture] }}.deb"

# For EL Family
syft_el_url: "https://github.com/anchore/{{ syft_app }}/releases/download/v{{ syft_version }}/{{ syft_app }}_{{ syft_version }}_{{ syft_os }}_{{ syft_architecture_map[ansible_architecture] }}.rpm"

Variables Overview:

Dependencies

No dependencies required.

Example Playbook

To use the role and install syft with the default settings, add this to your Ansible playbook:

- hosts: servers
  roles:
    - darkwizard242.syft

To customize the behavior and specify a different version of syft, you can do this:

- hosts: servers
  roles:
    - darkwizard242.syft
  vars:
    syft_version: 0.32.2

To customize for a different system architecture (like arm64), use the following:

- hosts: servers
  roles:
    - darkwizard242.syft
  vars:
    syft_arch: "arm64"

License

This role is licensed under the MIT License.

Author Information

This role was created by Ali Muhammad.