#2828·syft

Binary copied to image omitted from SBOM

Author: officerNordbergCreated May 1, 2024Updated Sep 11, 2026

Labelsenhancementgood-first-issuebinary-analysis

What happened: SBOM is missing principle binary artifact from image https://github.com/envoyproxy/envoy/blob/release/v1.27/ci/Dockerfile-envoy

bash

ARG ENVOY_BINARY=envoy
ARG ENVOY_BINARY_PREFIX=
COPY --from=binary --chown=0:0 --chmod=755 \
    "/usr/local/bin/${ENVOY_BINARY_PREFIX}${ENVOY_BINARY}" /usr/local/bin/envoy

What you expected to happen:

NAME                 VERSION                       TYPE
adduser              3.118ubuntu2                  deb
apt                  2.0.10                        deb
base-files           11ubuntu5.8                   deb
base-passwd          3.5.47                        deb
bash                 5.0-6ubuntu1.2                deb
bash                 5.0.17                        binary
...
envoy                 1.27.5                        binary

Steps to reproduce the issue: syft scan --from registry envoyproxy/envoy:v1.27-latest

Environment:

syft 1.3.0
OS: attempted on macOS and Centos

Source: anchore/syft

View original on GitHub View discussion on GitHub