Announcement
Announcing sbomify v0.26: The One Where Bootstrap Moved Out
A Faster, More Accessible UI The first thing you will notice is that sbomify feels faster. Pages load more quickly, transitions are...
Education
The Role of SBOMs in Cybersecurity: From Visibility to Vulnerability Response
A Software Bill of Materials (SBOM) is a foundational cybersecurity tool that provides a complete, machine-readable inventory of every...
Announcement
Announcing sbomify-action v0.13: The One Where We Go to FOSDEM
We timed the sbomify-action v0.13 release for FOSDEM 2026, where we presented on CRA-ready SBOM generation. FOSDEM 2026: CRA-Ready SBOMs...
Education
SBOM Scanning: How to Detect Vulnerabilities in Your Software Components
SBOM scanning is the process of analyzing a Software Bill of Materials to identify known vulnerabilities, license issues, and other risks in...
Education
What Is a Dependency in Software? A Beginner's Guide
A dependency in software is any external component – a library, framework, module, or package – that your application relies on to function....
Education
SBOM Generation Tools Compared: Syft, Trivy, cdxgen, and More
SBOM generation tools analyze your software projects and produce machine-readable Software Bills of Materials in standard formats like...
Announcement
Announcing sbomify v0.25: The One with Attestations
Software supply chain security is not just about knowing what is in your software. It is about proving that knowledge is authentic and has...
Announcement
Announcing sbomify-action v0.11: The One Where They Go to PyPI
With v0.11, sbomify-action is no longer tied to your CI/CD pipeline. Install it anywhere with pip install sbomify-action and generate...
Education
SBOM Management: How to Organize, Track, and Act on Your SBOMs
SBOM management is the practice of organizing, storing, versioning, distributing, and acting on Software Bills of Materials across an...
Education
SBOM Formats Compared: CycloneDX vs SPDX
An SBOM format defines the structure, fields, and serialization of a Software Bill of Materials. Two formats have emerged as industry...
Announcement
Announcing sbomify v0.24: The One with All the Plugins
Today marks a pivotal release for sbomify. With v0.24, we are laying the foundation for what will become a fully extensible, plugin-based...
Education
Software Composition Analysis (SCA): What It Is and How SBOMs Fit In
Software Composition Analysis (SCA) is a category of application security tooling that identifies open source and third-party components in...