# Github-Actions articles

## Pages

- [Announcing sbomify v26.3.0: The One That Ditches the Token](https://sbomify.com/2026/06/12/announcing-sbomify-v26-3-0-the-one-that-ditches-the-token/) (2026-06-12): sbomify v26.3.0 adds GitHub Actions OIDC trusted publishing so you can push SBOMs with no long-lived API token, expires personal access tokens by default, removes the Project layer, and ships a broad security and access-control hardening pass.
- [Trivy Compromise: How We Are Hardening sbomify-action](https://sbomify.com/2026/03/26/trivy-compromise-hardening-sbomify-action/) (2026-03-26): Aqua Security's Trivy was compromised twice in two weeks. Here is how we audited and hardened sbomify-action in response, and why we are moving to short-lived OIDC tokens.
- [Announcing sbomify-action v0.13: The One Where We Go to FOSDEM](https://sbomify.com/2026/02/04/announcing-sbomify-action-v0-13-the-one-where-we-go-to-fosdem/) (2026-02-04): sbomify-action v0.13 brings hash enrichment from lockfiles, an interactive configuration wizard, Conan Center integration for C/C++, and improved NTIA compliance with supplier fields and PURL generation from VCS URLs.
- [Announcing sbomify-action v0.11: The One Where They Go to PyPI](https://sbomify.com/2026/01/20/announcing-sbomify-action-v0-11-the-one-where-they-go-to-pypi/) (2026-01-20): sbomify-action v0.11 transforms from a CI-only tool into a fully-fledged CLI available on PyPI. Major additions include audit trails for compliance, SPDX format support, a pre-computed license database covering 28 Linux distro versions, and native Rust SBOM generation.
- [Major Updates: sbomify v0.21 and Action Module v0.8 & v0.9](https://sbomify.com/2025/12/19/major-updates-sbomify-v0-21-and-action-modules/) (2025-12-19): Triple release: sbomify v0.21 with vulnerability trends dashboard, plus GitHub Action v0.8 and v0.9 featuring modular generation plugins and 8 enrichment data sources.
- [Announcing GitHub Action 0.7.0 and sbomify 0.19](https://sbomify.com/2025/12/05/announcing-github-action-0-7-0-and-sbomify-0-19/) (2025-12-05): Major releases: GitHub Action 0.7.0 with ecosyste.ms enrichment and SPDX support, plus sbomify 0.19 with full Django+HTMX migration, custom domains, and CycloneDX 1.7.
- [GitHub Action module with Attestation](https://sbomify.com/2024/10/31/github-action-update-and-attestation/) (2024-10-31): New features in sbomify's GitHub Action including Dart lockfile support, Docker image SBOMs, NTIA enrichment, and SLSA build provenance attestation.
- [Big update to our GitHub Action](https://sbomify.com/2024/10/04/github-action-update/) (2024-10-04): Major overhaul of sbomify GitHub Action transforming it from a simple upload tool to a complete SBOM Swiss Army knife with generation, augmentation, and enrichment.
- [Announcing sbomify's GitHub Actions Module: Seamlessly Share SBOMs in Your CI/CD Pipeline](https://sbomify.com/2024/08/21/introducing-github-action-module/) (2024-08-21): Introducing sbomify's GitHub Actions module for automated SBOM generation in your CI/CD pipeline. Available on GitHub Marketplace for seamless integration.

---

From sbomify: https://sbomify.com/tags/github-actions/