syft can't extract go module information from executables on Windows #4271
Description
What happened:
Trying to scan executables on Windows that were built with go but it shows no information. Scanning the same file on Linux works fine.
What you expected to happen:
Output on Linux and Windows should be identical.
Steps to reproduce the issue:
Have syft scan itself:
Linux:
syft file:syft.exe
✔ Indexed file system syft.exe
✔ Cataloged contents 3212796a93710a736a66bacf8b6fe45a0590ff669dc0ecbeb546ad0d64929560
├── ✔ Packages [264 packages]
├── ✔ Executables [1 executables]
├── ✔ File digests [1 files]
└── ✔ File metadata [1 locations]
NAME VERSION TYPE
cloud.google.com/go v0.116.0 go-module
cloud.google.com/go/auth v0.9.9 go-module
cloud.google.com/go/auth/oauth2adapt v0.2.4 go-module
cloud.google.com/go/compute/metadata v0.7.0 go-module
cloud.google.com/go/iam v1.2.2 go-module
[...]
Windows:
syft.exe file:syft.exe
✔ Indexed file system syft.exe
✔ Cataloged contents 3212796a93710a736a66bacf8b6fe45a0590ff669dc0ecbeb546ad0d64929560
├── ✔ Packages [1 packages]
├── ✔ Executables [0 executables]
├── ✔ File metadata [0 locations]
└── ✔ File digests [0 files]
NAME VERSION TYPE
\syft UNKNOWN binary
Anything else we need to know?:
Tried on different Windows and Linux systems, but behavior was identical on all of them.
Environment:
- Output of
syft version:
Application: syft
Version: 1.33.0
BuildDate: 2025-09-15T20:38:16Z
GitCommit: b87b9191497c2d410b42c05591347d428129fd2a
GitDescription: v1.33.0
Platform: windows/amd64
GoVersion: go1.24.7
Compiler: gc
SchemaVersion: 16.0.39
- OS (e.g:
cat /etc/os-releaseor similar):
Windows 11, Windows Server 2022