Compliance
FDA Medical Device SBOM Requirements: What the New Cybersecurity Guidance Means for Manufacturers
On June 27, 2025, the FDA issued updated guidance on “Cybersecurity in Medical Devices: Quality System Considerations and Content of...
Podcast
CRA Explained: What the Cyber Resilience Act Means for Device Manufacturers
The EU Cyber Resilience Act (CRA) is transforming how device manufacturers approach cybersecurity. To break down what this means in...
Education
Software Supply Chain Management: Risks, Best Practices, and SBOM Integration
Software supply chain management is the practice of identifying, assessing, and mitigating risks across the entire chain of components,...
Announcement
Major Updates: sbomify v0.21 and Action Module v0.8 & v0.9
We have been busy at sbomify! Today we are announcing a triple release covering significant updates to both the core platform and our...
Education
CVE Vulnerabilities Explained: What They Are and Why They Matter
A CVE (Common Vulnerabilities and Exposures) is a standardized identifier assigned to a publicly known cybersecurity vulnerability. Each CVE...
Announcement
Announcing sbomify v0.20: Custom Domains & Streamlined Onboarding
We’re excited to announce the release of sbomify v0.20, a significant update focused on empowering organizations to make their Trust...
Announcement
Announcing GitHub Action 0.7.0 and sbomify 0.19
We are excited to announce significant updates to both our GitHub Action and the core sbomify platform. This release brings major...
Guide
Using Conan for C SBOMs
Last November I wrote about The C conundrum as there’s so much C code that needs SBOMs, but there was no straightforward way to...
News
CISA's Minimum Elements now in Draft
Update, August 2026: This post describes the 2025 public comment draft. The final 2026 Minimum Elements for a Software Bill of Materials...
Announcement
Big Update to sbomify
Happy 4 July to our US friends. Today, we are pleased to announce that we have shipped yet another big update to sbomify, version 0.15. This...
News
Unpacking Raspberry Pi's Built‑In SBOM Magic
When the Raspberry Pi Foundation quietly unveiled rpi‑image‑gen, most of the headlines focused on how it streamlines custom image creation....
Guide
Mastering SBOM Generation with Yocto
I recently spent time with Yocto to better understand how it works with SBOMs, and I was very impressed. In short, if you are building your...