Announcement
Announcing sbomify-action v26.8.0: The One That Went on a Diet
The headline number in this release is that the container image went from 515MB to 106MB. That is the fun part. The part that should...
Viktor Petersson
•
Aug 25. 2026
Read more →Announcement
Announcing sbomify v0.25: The One with Attestations
Software supply chain security is not just about knowing what is in your software. It is about proving that knowledge is authentic and has...
Viktor Petersson
•
Jan 23. 2026
Read more →Announcement
GitHub Action module with Attestation
Over the last few weeks, we’ve made some significant updates to our GitHub Actions module. Since our last update, we’ve added a...
Viktor Petersson
•
Oct 31. 2024
Read more →Education
What Is in-toto? Securing the Software Supply Chain End to End
When the XZ Utils backdoor was discovered in March 2024, it revealed how a malicious contributor could spend years infiltrating an...
Cowboy Neil
•
Aug 14. 2024
Read more →