Announcement
Announcing sbomify v26.3.0: The One That Ditches the Token
The headline of v26.3.0 is about getting rid of something: the long-lived API token sitting in your CI secrets. With GitHub Actions OIDC...
Announcement
Trivy Compromise: How We Are Hardening sbomify-action
The last few weeks have been turbulent in the world of supply chain security. Perhaps the most high-profile compromise has been in Aqua...
Announcement
Announcing sbomify-action v0.13: The One Where We Go to FOSDEM
We timed the sbomify-action v0.13 release for FOSDEM 2026, where we presented on CRA-ready SBOM generation. FOSDEM 2026: CRA-Ready SBOMs...
Announcement
Announcing sbomify-action v0.11: The One Where They Go to PyPI
With v0.11, sbomify-action is no longer tied to your CI/CD pipeline. Install it anywhere with pip install sbomify-action and generate...
Announcement
Major Updates: sbomify v0.21 and Action Module v0.8 & v0.9
We have been busy at sbomify! Today we are announcing a triple release covering significant updates to both the core platform and our...
Announcement
Announcing GitHub Action 0.7.0 and sbomify 0.19
We are excited to announce significant updates to both our GitHub Action and the core sbomify platform. This release brings major...
Announcement
GitHub Action module with Attestation
Over the last few weeks, we’ve made some significant updates to our GitHub Actions module. Since our last update, we’ve added a...
Announcement
Big update to our GitHub Action
In the last few weeks, we’ve worked hard on overhauling the sbomify GitHub Action based on customer feedback. The initial purpose of...
Announcement
Announcing sbomify's GitHub Actions Module: Seamlessly Share SBOMs in Your CI/CD Pipeline
We are thrilled to announce the launch of sbomify’s GitHub Actions Module – now available in the GitHub Marketplace! This powerful...