sbt
Last updated October 25, 2026View source (v0.30.0)
This page explains how Bomly builds a dependency graph for sbt projects: the detector chain it runs, what that chain needs, and what it can report.
| Property | Value |
|---|---|
| Package manager | sbt |
| Ecosystem | scala |
| Detector chain | sbt-native-detector, sbt-detector, syft-detector |
| Evidence patterns | build.sbt, project/plugins.sbt, project/build.properties |
| Ignored directories | target |
| Multi-module resolution | Yes |
| Install-first support | No |
| Remediation hints | None |
| Commands the chain may run | sbt. The Syft fallback is built in; the lite build runs an external syft from PATH instead. |