Base image and their dependencies

[BahriNipun]

Will it be possible to find-

1. the base image involved
2. Segregating dependencies from base image and upstream layers ?

[wagoodman]

Right now the only way to do this is to filter out the SBOM document output from docker sbom manually. However, in the future we are looking at --layer to possibly answer these kinds of questions by adding more kinds of layer selections (see the upstream issue anchore/syft#15 , which expands on syft scopes, the same feature as docker sbom --layer).