Appearance
turbo scan
Use turbo scan to analyze Turbo images or the local desktop and generate a CycloneDX SBOM in JSON. Run it when you need a repeatable inventory for security reviews or compliance exports.
Usage
text
turbo scan [<image>...] [--type=images|desktop] [--depth=minimal|standard|comprehensive] [--include-paths=<PATHS>] [--exclude-paths=<PATHS>] [--output-file=<PATH>] [--format=json|json-stream] [--all-users] [--wait-after-error] [--wait-after-exit]Description
The command defaults to images mode and scans each image argument to produce a Software Bill of Materials (SBOM). Use --type=desktop to inventory installed applications on the local desktop instead of Turbo images. Desktop scans respect optional include and exclude path filters and can run at different depths to balance speed and coverage. The console displays a human-readable summary, and you can write the full CycloneDX JSON SBOM to a file for downstream tooling.
Options
| Flag | Description | Default/Values | Notes |
|---|---|---|---|
--type, -t | Choose what to scan. | Default images; desktop | Desktop mode ignores image arguments. |
--depth | Control desktop scan thoroughness. | Default standard; minimal, comprehensive | Applies only to --type=desktop. |
--include-paths | Additional desktop paths to scan (comma-separated). | None | Desktop only. |
--exclude-paths | Desktop paths to skip (comma-separated). | None | Desktop only. |
--format | Console output format. | Default summary; json, json-stream | Does not change SBOM file format. |
--output-file | Write the CycloneDX SBOM to a file path. | None | Useful for importing into security tools. |
--all-users | Look up images in the machine-wide repository. | Off | Images mode only. |
--wait-after-error | Keep the session open after an error. | Off | |
--wait-after-exit | Keep the session open after completion. | Off |
Examples
bash
# Scan multiple images
turbo scan firefox chrome:latest my-app:1.0
# Scan an image and save the CycloneDX SBOM to a file
turbo scan my-app:latest --output-file=my-app-sbom.json
# Inventory the local desktop with standard depth
turbo scan --type=desktop
# Desktop scan with custom paths and a fast depth
turbo scan -t desktop --depth=minimal --include-paths="C:\\MyApps,D:\\Tools" --exclude-paths="C:\\Games"Output
Console Summary Example
text
--- Scan Results ---
- Microsoft Visual C++ 2015-2022 Redistributable (x64) (14.38.33130.0)
- Git (2.45.1)
--- Dependency Graph ---
- Git (2.45.1)
- Microsoft Visual C++ 2015-2022 Redistributable (x64) (14.38.33130.0)CycloneDX JSON Sample
json
{
"bomFormat": "CycloneDX",
"specVersion": "1.6",
"components": [
{
"type": "container",
"bom-ref": "firefox-136.0.4",
"publisher": "Mozilla",
"name": "Firefox",
"version": "136.0.4",
"cpe": "cpe:2.3:a:mozilla:firefox:136.0.4:*:*:*:*:*:*:*",
"properties": [
{
"name": "turbo:startupFile",
"value": "\"@PROGRAMFILESX86@\\Mozilla Firefox\\firefox.exe\" "
},
{
"name": "turbo:startupFile",
"value": "\"@PROGRAMFILESX86@\\Mozilla Firefox\\private_browsing.exe\" "
}
],
"evidence": {
"occurrences": [
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/AccessibleMarshal.dll"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/crashreporter.exe"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/default-browser-agent.exe"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/firefox.exe"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/freebl3.dll"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/gkcodecs.dll"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/ipcclientcerts.dll"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/lgpllibs.dll"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/maintenanceservice.exe"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/maintenanceservice_installer.exe"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/mozavcodec.dll"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/mozavutil.dll"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/mozglue.dll"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/mozwer.dll"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/nmhproxy.exe"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/notificationserver.dll"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/nss3.dll"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/nssckbi.dll"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/pingsender.exe"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/plugin-container.exe"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/private_browsing.exe"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/softokn3.dll"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/updater.exe"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/wmfclearkey.dll"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/xul.dll"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/gmp-clearkey/0.1/clearkey.dll"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/uninstall/helper.exe"
},
{
"location": "file://@WINDIR'XSxS/[email protected]/mozglue.dll\"' (see below for file content)"
}
]
}
},
{
"type": "library",
"bom-ref": "angle-libegl-dynamic-link-library-2.1.19739-git-hash:-419cd2c3213b",
"publisher": "",
"name": "ANGLE libEGL Dynamic Link Library",
"version": "2.1.19739 git hash: 419cd2c3213b",
"cpe": "cpe:2.3:a:*:angle_libegl_dynamic_link_library:2.1.19739_git_hash_419cd2c3213b:*:*:*:*:*:*:*",
"evidence": {
"occurrences": [
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/libEGL.dll"
}
]
}
},
{
"type": "library",
"bom-ref": "angle-libglesv2-dynamic-link-library-2.1.19739-git-hash:-419cd2c3213b",
"publisher": "",
"name": "ANGLE libGLESv2 Dynamic Link Library",
"version": "2.1.19739 git hash: 419cd2c3213b",
"cpe": "cpe:2.3:a:*:angle_libglesv2_dynamic_link_library:2.1.19739_git_hash_419cd2c3213b:*:*:*:*:*:*:*",
"evidence": {
"occurrences": [
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/libGLESv2.dll"
}
]
}
},
{
"type": "library",
"bom-ref": "microsoft-visual-studio-14.38.33135.0",
"publisher": "Microsoft Corporation",
"name": "Microsoft Visual Studio",
"version": "14.38.33135.0",
"cpe": "cpe:2.3:a:microsoft_corporation:microsoft_visual_studio:14.38.33135.0:*:*:*:*:*:*:*",
"evidence": {
"occurrences": [
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/msvcp140.dll"
},
{
"location": "file://@PROGRAMFILESX86'Mozilla' (see below for file content) Firefox/vcruntime140.dll"
}
]
}
}
],
"dependencies": [
{
"ref": "firefox-136.0.4",
"dependsOn": [
"angle-libegl-dynamic-link-library-2.1.19739-git-hash:-419cd2c3213b",
"angle-libglesv2-dynamic-link-library-2.1.19739-git-hash:-419cd2c3213b",
"microsoft-visual-studio-14.38.33135.0"
]
}
]
}