# Php articles

## Pages

- [This Week in SBOMs: 4,837 Hijacked GitHub Accounts, SSHole Joins KEV, and the CRA Standards Slip](https://sbomify.com/2026/11/13/this-week-in-sboms-2026-11-13/) (2026-11-13): SBOM news for 7 to 13 November 2026: a CI secret stealer pushed through 4,837 stolen GitHub accounts, a trojanized bee-js npm release with valid SLSA provenance, OpenSSH CVE-2026-123158 added to CISA KEV, PHP2Shell exploited in Check Point gateways, Go, Node.js, Git and Apache httpd security releases, the Commission's three-month extension to the CRA standardisation request, TC54 minutes for CycloneDX 2.0, and a UK government standard that requires an AIBOM.
- [Announcing sbomify-action v26.8.0: The One That Went on a Diet](https://sbomify.com/2026/08/25/announcing-sbomify-action-v26-8-0-the-one-that-went-on-a-diet/) (2026-08-25): sbomify-action v26.8.0 cuts the container image from 515MB to 106MB by fetching verified, attested tool bundles on demand, ends silent SBOM quality downgrades, adds git submodule support, and introduces Clearly Cached, a caching proxy that makes ClearlyDefined license data actually usable from CI.

---

From sbomify: https://sbomify.com/tags/php/