$ syft -q istio/pilot:1.26.8 | grep -e 'istio' -e 'pilot'
istio.io/api                                      v1.26.7-0.20251203124221-04fd5ef0d3ca  go-module
istio.io/client-go                                v1.26.7-0.20251203124822-c46e19018717  go-module
istio.io/istio                                    v0.0.0-20251213104211-4ea27a1efd95     go-module

$ syft -q istio/proxyv2:1.26.8 | grep -e 'istio' -e 'pilot'
istio.io/api                                      v1.26.7-0.20251203124221-04fd5ef0d3ca  go-module
istio.io/istio                                    v0.0.0-20251213104211-4ea27a1efd95     go-module

$ ./pilot-discovery version
client version: version.BuildInfo{Version:"1.26.8", GitRevision:"4ea27a1efd955d5ed1db8b817d3c8dd70a7ae52a", GolangVersion:"go1.24.11", BuildStatus:"Clean", GitTag:"1.26.8"}
$ strings pilot-discovery | grep '1\.26\.8'
1.26.8
1.26.8

$ ./pilot-discovery version
client version: version.BuildInfo{Version:"1.25.0", GitRevision:"57e59c2e5d6b757a68d867491d9c9c09694e1522", GolangVersion:"go1.23.5", BuildStatus:"Clean", GitTag:"1.25.0"}
$ strings pilot-discovery | grep '1\.25\.0'
toc_%d</sub> upon  line added , ctx= rule  >= _pHIDDEN'true''null'EQUALSLBRACERBRACELPARENRPARENEXCLAMLETTERCEL.g4memberIsWeakSyntaxNumberIsListMapKeyFieldsOneofsValuesOutputGoTypevarintreadU4json: 1.25.0sha256brotli:%d:%datomicIgnoreStrictZ07:00cannotfield sha384sha512layersLambdalambdasigmafhellipweierpforalllowastthere4otimeslfloorrfloorspadesheartsScaronscaronthinspdaggerDaggerpermillsaquorsaquoxmlns: and >CDATA[ (trap writeatreaddirsymlinkprofileWarningmessagedefaultforcegcallocmWcpuprofallocmRunknowngctraceIO waitrunningsyscallwaitingforevernetworkUNKNOWN:events, goid= s=nil
1.25.0
1.25.0
dep     istio.io/api    v1.25.0-alpha.0.0.20250212060243-76cd29bc906f   h1:C1+VOTJD74UQXW9TeE/uOHqO13zxb7mGuM0G7Tj/xc8=
dep     istio.io/client-go      v1.25.0-alpha.0.0.20250212060743-20055c33db8f   h1:Iwlp4ZYnTpyJia+/GBeDR2qubjZ1jMA4Yja0vHay54w=
:
:
:

$ ./pilot-discovery version
version.BuildInfo{Version:"1.20.0", GitRevision:"6869a6c2371e21c847d216065cf5c59863d01b4c", GolangVersion:"go1.21.3", BuildStatus:"Clean", GitTag:"1.20.0"}
$ strings pilot-discovery | grep '1\.20\.0'
%gsGITHUB/apis/subsetkMGTPEinlineRules:&Rule{Scope:Start:pausedHints:Hosts:exceptegressScale:&JSON{Title:AllOf:OneOf:AnyOf:NormalHeaderAppendSha256Remotenil rr, id: ZONE: DNSKEY0.%02d%.2fm %.0fm %0.16x%0.16XSHA256GOST94SHA384SHA512IQUERYSTATUSNOTIFYUPDATERSAMD5NOTIMPBADSIGBADKEYBADALGACPKIXNIMLOCSMIMEATALINKUNSPECZONEMDPolicyref#%d0x%02x0x%04x0x%06x0x%08x%c|%v|GLOBALFilterEGRESSReasonMAGLEVActionSource%s: %qPkcs12KeyLog_count1.19.0_total_ratio_bytes%w: %vlatest0::0/0 -H %qbearerdeniedresultnodeIDregionallocsNACKEDtunnel1.20.0SYNCEDPatch:Token:schemanowait[]Job{faileduuidv4Hello!opaquetoDateabbrevsubstrrepeatsquotepluralsplitntoJsontypeOftypeIskindOfkindIsosBaseb64encb64decb32encb32dechasKeyappendconcatbcryptsemverOUTPUTUsers:rangesstrict$patchavx512rdrandrdseedempty rune1 %v(%v)RoutesCreateDeleteRemoveScaledAndIdsHTTP10HTTP11NotSetTHRIFTNumberIGNOREGREEDYHEADERJitterBufferRegionBypassNUMBERBASE64IpTagsDomainPrefixMASTERFRAMEDBINARYOpcodeGetAclSetAclIsAnonModuloParsedEventsBucketNodeIdSuffix_var%d@itemsequalsin_mapto_dynfilter<<%T>>importpolicyswitchMyNameBearerSchemeRangesmetricexemptqueues&Role{%s %s
1.20.0
1.20.0
dep     istio.io/api    v1.20.0-rc.0    h1:iRe7ZSS98bCKqXPZLkc0nYbTZefs69VjdDppR865Fsg=
dep     istio.io/client-go      v1.20.0-rc.0    h1:Dm2YNG/RBFnuMpfQGEPEp6bVTPFKxWlDYVSsuR15tSs=
:
:
:

$ ./pilot-discovery version
version.BuildInfo{Version:"1.15.0", GitRevision:"e3364ab424b70ca8ee1ca76cb0b3afb73476aaac", GolangVersion:"go1.19", BuildStatus:"Clean", GitTag:"1.15.0"}
$ strings pilot-discovery | grep '1\.15\.0'
--init--repo--user.local.onion.pb-v1.proto/apis//debug/docs//proc//ready/token0.%02d0.23.00::0/00x%02x0x%04x0x%06x0x%08x1.15.01.47.0390625:%d:%d:15010:15012:15014:15017:https<-chan</a>.
1.15.0
1.15.0
dep     istio.io/client-go      v1.15.0-beta.1.0.20220826132951-9dfd19c7a2a0    h1:GSm2hZ8JoDDBypyWkCdh4UIVHyE3jM3Nw3B+MzS/biM=
:
:
:

$ ./pilot-discovery version
version.BuildInfo{Version:"1.10.0", GitRevision:"d26cba7e341587453ffeb978f5cf6fbc32f346f8", GolangVersion:"go1.16.4", BuildStatus:"Clean", GitTag:"1.10.0"}
$ strings pilot-discovery | grep '1\.10\.0'
.local.onion.proto/apis//debug/docs//proc//ready/token0.23.00::0/00x%02x0x%04x0x%06x0x%08x1.10.01.36.01.38.3390625:15010:15012:15014:15017:https<-chan</a>.
dep     github.com/prometheus/client_golang     v1.10.0 h1:/o0BDeWzLWXNZ+4q5gXltUvaMpJqckTa+jTNoB+z4cg=
dep     istio.io/client-go      v1.10.0-rc.1.0.20210512214749-e6f28edf3fce      h1:hu22lxf9wVAggzoKHW3k6yhcAy5QV+DHb98bgru7nSM=
1.10.0
1.10.0
:
:
:

$ ./pilot-discovery version
version.BuildInfo{Version:"1.5.0", GitRevision:"c3c353285578eb68b334fc8766746b754b6b3789", GolangVersion:"go1.13.8", BuildStatus:"Clean", GitTag:"1.5.0"}
$ strings pilot-discovery | grep '1\.5\.0'
            [CompletionResult]::new('-%s', '%s', [CompletionResultType]::ParameterName, '%s')connect-failure,refused-stream,unavailable,cancelled,resource-exhausted,retriable-status-codesconsecutive_errors should not be set with consecutive_5xx_errors or consecutive_gateway_errorsenvoy.config.cluster.v3.Cluster_LbSubsetConfig_LbSubsetSelector_LbSubsetSelectorFallbackPolicyenvoy.config.core.v3.GrpcService.GoogleGrpc.CallCredentials.ServiceAccountJWTAccessCredentialsinvalid %sScopedRoutes_ScopeKeyBuilder_FragmentBuilder_HeaderValueExtractor_KvElement.%s: %s%sk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps.DefinitionsEntryA brief CamelCase message indicating details about why the pod is in this state. e.g. 'Evicted'Conditions represents the latest available observations of a deployment config's current state.ContainerRuntime Version reported by the node through runtime remote API (e.g. docker://1.5.0).EnableMysqlFilter enables injection of `envoy.filters.network.mysql_proxy` in the filter chain.EnableRedisFilter enables injection of `envoy.filters.network.redis_proxy` in the filter chain.HorizontalPodAutoscalerSpec describes the desired functionality of the HorizontalPodAutoscaler.Indicates that the deployment is paused and will not be processed by the deployment controller.PodDNSConfig defines the DNS parameters of a pod in addition to those generated from DNSPolicy.RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.Specification of the desired attach/detach volume behavior. Populated by the Kubernetes system.Stderr if true indicates that stderr is to be redirected for the attach call. Defaults to true.Stdin if true, redirects the standard input stream of the pod for this call. Defaults to false.Stdout if true indicates that stdout is to be redirected for the attach call. Defaults to true.The Citadel's public key is successfully written into configmap istio-security in namespace %s.The specified resyncPeriod %v is invalid because this shared informer doesn't support resyncingUnavailableReplicas is the total number of unavailable pods targeted by this deployment config.
1.5.0
1.5.0

$ ./pilot-discovery version
Version: 1.0.0
GitRevision: 3a136c90ec5e308f236e0d7ebb5c4c5e405217f4
User: root@71a9470ea93c
Hub: docker.io/istio
GolangVersion: go1.10.1
BuildStatus: Clean
$ strings pilot-discovery | grep '1\.0\.0'
**--%s**, idle: /* %v *//dev/log/execute/gid_map/members/metrics/uid_map/vendor//version/{scope}0123456710.1.0.010.2.0.02.5.4.102.5.4.112.5.4.172006-1-2404.html48828125; Secure</table></tbody></thead><h2 id="<h3 id="APIGroupAcceptedAddress:AffinityAllowed:AndRulesApiKeys:ArmenianBackend:BalineseBecause;BehaviorBinarySIBopomofoBugineseCONFLICTCanceledCapacityCategoryCayleys;Cconint;Cedilla;CherokeeClustersCommand:ConflictContinueCyrillicDNS nameDRAININGDSA-SHA1DataLossDecemberDefault:Detail: Details:Diamond;Divisor:Doubles:DownTee;DuployanDurationENFORCEDElement;EndpointEntries:EnvFrom:Epsilon;EthiopicExample:ExamplesExtenderFSGroup:FebruaryFields: FilenameFlocker:FreebindGateway:GeorgianGitRepo:GujaratiGurmukhiHTTP/1.1HTTP/2.0HTTPGet:Handler:HiraganaHostIPC:HostPID:HttpRuleINTERNALIPBlock:ImageID:Implies;Ingress:InstFailInstRuneInternalIntervalJan 2006JavaneseJstype: KatakanaKayah_LiKeyring:Keys[%v]LbPolicyLeftTee;Linear_ALinear_BListMetaListenerLocale: LocalityLocationMahajaniMaximum:Message:MetadataMethod: Metrics:Minimum:NO_ERRORNO_PROXYNewLine;NoBreak;NodeBoolNodeListNodeNameNodeSpecNodeTextNotFoundNotLess;NovemberNumber: OSImage:Ol_ChikiOmicron;Options:OrFilterOverBar;POD_NAMEPRIORITYPacked: ParseIntPasswordPath[%v]Pattern:Pending:Phags_PaPodCIDR:Portals:PreStop:PriorityProduct;ProtocolQuantityQuobyte:RBDPool:REDIRECTRdlengthReadBoolReadInt8ReceivedRedirectRelated:Request:ResourceRoleRef:Running:SANITIZESELinux:SETTINGSSHA1-RSASHUTDOWNSaturdayScaleIO:Seconds:Secrets:SeeOtherService:SourceIpSources:Strings:SubPath:Subject:Subsets:Suspend:Syntax: TLS_AUTOTagbanwaTai_ThamTai_VietThursdayTifinaghToo longTrailer:TypeMetaTypeUrl:USE_PEERUgariticUpArrow;Uparrow;Upsilon;UseProxyUserInfoUsernameValues: Version:Volumes:Waiting:WatchdogZgotmplZ[::1]:53[:word:][mapKey][signal "@type":"value":
1.0.0

$ ./pilot-agent version
client version: version.BuildInfo{Version:"1.26.8", GitRevision:"4ea27a1efd955d5ed1db8b817d3c8dd70a7ae52a", GolangVersion:"go1.24.11", BuildStatus:"Clean", GitTag:"1.26.8"}
$ strings pilot-agent | grep '1\.26\.8'
1.26.8
1.26.8

$ ./pilot-agent version
client version: version.BuildInfo{Version:"1.25.0", GitRevision:"57e59c2e5d6b757a68d867491d9c9c09694e1522", GolangVersion:"go1.23.5", BuildStatus:"Clean", GitTag:"1.25.0"}
$ strings pilot-agent | grep '1\.25\.0'
1.25.0
1.25.0
dep     istio.io/api    v1.25.0-alpha.0.0.20250212060243-76cd29bc906f   h1:C1+VOTJD74UQXW9TeE/uOHqO13zxb7mGuM0G7Tj/xc8=
:
:
:

$ ./pilot-agent version
version.BuildInfo{Version:"1.20.0", GitRevision:"6869a6c2371e21c847d216065cf5c59863d01b4c", GolangVersion:"go1.21.3", BuildStatus:"Clean", GitTag:"1.20.0"}
$ strings pilot-agent | grep '1\.20\.0'
1.20.0
1.20.0
dep     istio.io/api    v1.20.0-rc.0    h1:iRe7ZSS98bCKqXPZLkc0nYbTZefs69VjdDppR865Fsg=
:
:
:

$ ./pilot-agent version
version.BuildInfo{Version:"1.15.0", GitRevision:"e3364ab424b70ca8ee1ca76cb0b3afb73476aaac", GolangVersion:"go1.19", BuildStatus:"Clean", GitTag:"1.15.0"}
$ strings pilot-agent | grep '1\.15\.0'
1.15.0
1.15.0

$ ./pilot-agent version
version.BuildInfo{Version:"1.10.0", GitRevision:"d26cba7e341587453ffeb978f5cf6fbc32f346f8", GolangVersion:"go1.16.4", BuildStatus:"Clean", GitTag:"1.10.0"}
$ strings pilot-agent | grep '1\.10\.0'
dep     github.com/prometheus/client_golang     v1.10.0 h1:/o0BDeWzLWXNZ+4q5gXltUvaMpJqckTa+jTNoB+z4cg=
1.10.0
1.10.0
:
:
:

$ ./pilot-agent version
version.BuildInfo{Version:"1.5.0", GitRevision:"c3c353285578eb68b334fc8766746b754b6b3789", GolangVersion:"go1.13.8", BuildStatus:"Clean", GitTag:"1.5.0"}
$ strings pilot-agent | grep '1\.5\.0'
            [CompletionResult]::new('-%s', '%s', [CompletionResultType]::ParameterName, '%s')consecutive_errors should not be set with consecutive_5xx_errors or consecutive_gateway_errorsenvoy.config.cluster.v3.Cluster_LbSubsetConfig_LbSubsetSelector_LbSubsetSelectorFallbackPolicyenvoy.config.core.v3.GrpcService.GoogleGrpc.CallCredentials.ServiceAccountJWTAccessCredentialsinvalid %sScopedRoutes_ScopeKeyBuilder_FragmentBuilder_HeaderValueExtractor_KvElement.%s: %s%sk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps.DefinitionsEntryA brief CamelCase message indicating details about why the pod is in this state. e.g. 'Evicted'ContainerRuntime Version reported by the node through runtime remote API (e.g. docker://1.5.0).EnableMysqlFilter enables injection of `envoy.filters.network.mysql_proxy` in the filter chain.EnableRedisFilter enables injection of `envoy.filters.network.redis_proxy` in the filter chain.HorizontalPodAutoscalerSpec describes the desired functionality of the HorizontalPodAutoscaler.Indicates that the deployment is paused and will not be processed by the deployment controller.PodDNSConfig defines the DNS parameters of a pod in addition to those generated from DNSPolicy.RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.Specification of the desired attach/detach volume behavior. Populated by the Kubernetes system.Stderr if true indicates that stderr is to be redirected for the attach call. Defaults to true.Stdin if true, redirects the standard input stream of the pod for this call. Defaults to false.Stdout if true indicates that stdout is to be redirected for the attach call. Defaults to true.
1.5.0
1.5.0

$ ./pilot-agent version
Version: 1.0.0
GitRevision: 3a136c90ec5e308f236e0d7ebb5c4c5e405217f4
User: root@71a9470ea93c
Hub: docker.io/istio
GolangVersion: go1.10.1
BuildStatus: Clean
$ strings pilot-agent | grep '1\.0\.0'
1.0.0