Compliance
FDA Medical Device SBOM Requirements: What the New Cybersecurity Guidance Means for Manufacturers
On June 27, 2025, the FDA issued updated guidance on “Cybersecurity in Medical Devices: Quality System Considerations and Content of...
Education
Apache License 2.0: What It Is, How It Works, and What It Means for Your Software
The Apache License 2.0 is a permissive open source license published by the Apache Software Foundation (ASF) that allows users to freely...
Podcast
CRA Explained: What the Cyber Resilience Act Means for Device Manufacturers
The EU Cyber Resilience Act (CRA) is transforming how device manufacturers approach cybersecurity. To break down what this means in...
Education
Container Security: Best Practices for Securing Docker and Kubernetes
Container security is the practice of protecting containerized applications and their infrastructure throughout the entire lifecycle – from...
Education
What Is a KEV? Understanding CISA's Known Exploited Vulnerabilities Catalog
A KEV – Known Exploited Vulnerability – is a vulnerability that attackers are exploiting right now. When Apache Log4Shell (CVE-2021-44228)...
Education
Software Supply Chain Management: Risks, Best Practices, and SBOM Integration
Software supply chain management is the practice of identifying, assessing, and mitigating risks across the entire chain of components,...
Education
The GPL License: A Comprehensive Guide to the GNU General Public License
The GPL (GNU General Public License) is a free software license that guarantees end users the freedom to run, study, modify, and share...
Announcement
Major Updates: sbomify v0.21 and Action Module v0.8 & v0.9
We have been busy at sbomify! Today we are announcing a triple release covering significant updates to both the core platform and our...
Education
CVE Vulnerabilities Explained: What They Are and Why They Matter
A CVE (Common Vulnerabilities and Exposures) is a standardized identifier assigned to a publicly known cybersecurity vulnerability. Each CVE...
Education
Software Development Life Cycle (SDLC): A Complete Guide
The Software Development Life Cycle (SDLC) is a structured process that defines the stages involved in developing software from initial...
Announcement
Announcing sbomify v0.20: Custom Domains & Streamlined Onboarding
We’re excited to announce the release of sbomify v0.20, a significant update focused on empowering organizations to make their Trust...
Announcement
Announcing GitHub Action 0.7.0 and sbomify 0.19
We are excited to announce significant updates to both our GitHub Action and the core sbomify platform. This release brings major...