diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-containers/syft b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-containers/syft
new file mode 100644
index 0000000000..23f700402e
--- /dev/null
+++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-containers/syft
@@ -0,0 +1,5 @@
+# there are only examples installed
+syft_install_mask=" /usr/share/syft/examples "
+INSTALL_MASK+="${syft_install_mask}"
+PKG_INSTALL_MASK+="${syft_install_mask}"
+unset syft_install_mask