The sbomify Blog

Content for software, product, and digital security experts

Browse by category or topic.

Announcement

Announcing GitHub Action 0.7.0 and sbomify 0.19

We are excited to announce significant updates to both our GitHub Action and the core sbomify platform. This release brings major...

Viktor Petersson • Dec 5. 2025
Read more →

Guide

Using Conan for C SBOMs

Last November I wrote about The C conundrum as there’s so much C code that needs SBOMs, but there was no straightforward way to...

Chris Swan • Sep 4. 2025
Read more →

News

CISA's Minimum Elements now in Draft

Update, August 2026: This post describes the 2025 public comment draft. The final 2026 Minimum Elements for a Software Bill of Materials...

Viktor Petersson • Aug 23. 2025
Read more →

Announcement

Big Update to sbomify

Happy 4 July to our US friends. Today, we are pleased to announce that we have shipped yet another big update to sbomify, version 0.15. This...

Viktor Petersson • Jul 4. 2025
Read more →

News

Unpacking Raspberry Pi's Built‑In SBOM Magic

When the Raspberry Pi Foundation quietly unveiled rpi‑image‑gen, most of the headlines focused on how it streamlines custom image creation....

Viktor Petersson • Apr 17. 2025
Read more →

Announcement

Chris Swan Joins sbomify Advisory Board

sbomify is excited to announce that Chris Swan has joined its advisory board. Chris brings extensive experience in DevOps, open source, and...

Viktor Petersson • Feb 21. 2025
Read more →

Guide

Mastering SBOM Generation with Yocto

I recently spent time with Yocto to better understand how it works with SBOMs, and I was very impressed. In short, if you are building your...

Viktor Petersson • Feb 21. 2025
Read more →

Announcement

sbomify Goes Open Source: A New Chapter in SBOM Management

I am thrilled to share that sbomify is now officially open source! As of today, you can find our project on GitHub. This decision is a leap...

Viktor Petersson • Jan 31. 2025
Read more →

Compliance

How SBOMs Can Help You Achieve PCI DSS 4.0 Compliance

What Is PCI DSS 4.0? The Payment Card Industry Data Security Standard (PCI DSS) is a set of security standards designed to ensure that...

Viktor Petersson • Jan 7. 2025
Read more →

Guide

The C conundrum - generating SBOMs when there's no lockfile

Generating an SBOM for something created in a modern language like Dart, Go, Python or Rust is pretty easy. Dependencies are declared using...

Chris Swan • Nov 18. 2024
Read more →

Announcement

sbomify GitHub Action v0.3.0: Now Faster and Compatible with GitLab!

We’re excited to announce the release of version 0.3.0 of our GitHub Actions module! This update brings some valuable enhancements,...

Viktor Petersson • Nov 12. 2024
Read more →

Announcement

GitHub Action module with Attestation

Over the last few weeks, we’ve made some significant updates to our GitHub Actions module. Since our last update, we’ve added a...

Viktor Petersson • Oct 31. 2024
Read more →