Ansible Role: syft

Role to install (by default) syft on Debian/Ubuntu and EL systems. A CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems.

Requirements

None.

Role Variables

Available variables are listed below (located in defaults/main.yml):

Variables list:

syft_app: syft
syft_desired_state: present
syft_version: 1.11.1
syft_os: "{{ ansible_system | lower }}"
syft_architecture_map:
  amd64: amd64
  arm: arm64
  x86_64: amd64
  armv6l: armv6
  armv7l: armv7
  aarch64: arm64
  32-bit: "386"
  64-bit: amd64

# For Debian/Ubuntu Family
syft_debian_url: "https://github.com/anchore/{{ syft_app }}/releases/download/v{{ syft_version }}/{{ syft_app }}_{{ syft_version }}_{{ syft_os }}_{{ syft_architecture_map[ansible_architecture] }}.deb"

# For EL Family
syft_el_url: "https://github.com/anchore/{{ syft_app }}/releases/download/v{{ syft_version }}/{{ syft_app }}_{{ syft_version }}_{{ syft_os }}_{{ syft_architecture_map[ansible_architecture] }}.rpm"

Variables table:

Dependencies

None

Example Playbook

For default behaviour of role (i.e. installation of syft) in ansible playbooks.

- hosts: servers
  roles:
    - darkwizard242.syft

For customizing behavior of role (i.e. specifying the desired syft version) in ansible playbooks.

- hosts: servers
  roles:
    - darkwizard242.syft
  vars:
    syft_version: 0.32.2

For customizing behavior of role (i.e. different os architecture of syft package like arm64) in ansible playbooks.

- hosts: servers
  roles:
    - darkwizard242.syft
  vars:
    syft_arch: "arm64"

License

MIT

Author Information

This role was created by Ali Muhammad