Hey everyone!
I came across Syft while exploring options for a project I’m working on and it seems like it could be a great fit. Would appreciate any guidance or pointers to existing threads!
Use case: We’re building a vulnerability scanner as a service for Linux devices, and Syft is on our radar as a potential core component for this.
A few things we’ve run into or are thinking about:
- RAM utilization: We noticed some concerns here and would love to understand if there are ways to optimize or tune this for our setup.
- Scan scope adjustment: Since we won’t always know the exact configuration of a customer’s device upfront, we’re wondering how flexible Syft is when it comes to narrowing or adjusting the scan scope dynamically.
Thanks in advance!