---
schema_version: 1
route: /t/syft.md
tool: "syft"
---

# sincecutoff.com /t/syft — Syft

- name: Syft
- kind: cli
- children: none
- homepage: <https://github.com/anchore/syft>

Changes to the tools coding agents drive, since a model's training cutoff, each linked to its first-party source. Check installed versions and limitations before acting; a cutoff date does not establish what a model knows.
Original editorial content: [Apache 2.0](https://sincecutoff.com/v1/data-license.txt), by [0xPatrick](https://0xpatrick.dev). Preserve applicable license and [NOTICE](https://sincecutoff.com/notice.txt) attribution when redistributing. Third-party source text and examples retain their own rights. [License scope and attribution](https://sincecutoff.com/v1/license.json).
To stay current, read the changes feed: [`/v1/changes.md?tool=syft`](https://sincecutoff.com/v1/changes.md?tool=syft) (or `.json`), adding `since=YYYY-MM-DD` for your training cutoff. Entries for registered children are included; the registry itself is `/v1/tools.json`. How to page and save your place: [llms.txt](https://sincecutoff.com/llms.txt).

### syft adds extended Go symbol-capture scope and module patterns (2026-08-10)
- slug: syft-adds-extended-go-symbol-capture-scope-and-module-patterns-e42586870517
- score: 0.98

How to use it:

When configuring a Syft v1.51.0 SBOM for Grype reachability analysis, set `golang.capture-symbols` to `extended-stdlib` to capture stdlib and modules under `golang.org/x/`. Add `golang.capture-symbols-modules` patterns to widen that selection; they are ignored when capture-symbols is `none`.

Examples:

```
syft scan <image-or-directory> --config <path/to/syft.yaml>
```

```
golang:
  capture-symbols: extended-stdlib
  capture-symbols-modules:
    - github.com/klauspost/**
```

- why_it_matters: Configure Go symbol capture in an SBOM for grype reachability analysis.
- before: Set `golang.capture-symbols` to `none`, `stdlib`, or `all` to select symbol data capture scope.
- sources: <https://github.com/anchore/syft/releases/tag/v1.51.0>, <https://github.com/anchore/syft/pull/5154>, <https://github.com/anchore/syft/blob/v1.51.0/README.md>, <https://github.com/anchore/syft/blob/v1.51.0/cmd/syft/internal/options/golang.go>
- gotchas: "Version: v1.51.0"; "golang.capture-symbols: Symbol capture scope; allowed values are `none`, `stdlib`, `extended-stdlib`, and `all`. `extended-stdlib` selects stdlib plus modules under `golang.org/x/`."; "golang.capture-symbols-modules: List of Go module path glob patterns to capture in addition to the selected scope; patterns only widen scope and are inert when capture-symbols is `none`. `**` crosses path separators; `*` does not. A trailing major version suffix is ignored unless the pattern spells one out."; "`capture-symbols-modules` is unioned with the selected scope and only widens it."; "Patterns are standard doublestar globs matched against module paths with trailing major version suffixes removed."