Announcement
sbomify Goes Open Source: A New Chapter in SBOM Management
I am thrilled to share that sbomify is now officially open source! As of today, you can find our project on GitHub. This decision is a leap...
Compliance
How SBOMs Can Help You Achieve PCI DSS 4.0 Compliance
What Is PCI DSS 4.0? The Payment Card Industry Data Security Standard (PCI DSS) is a set of security standards designed to ensure that...
Guide
The C conundrum - generating SBOMs when there's no lockfile
Generating an SBOM for something created in a modern language like Dart, Go, Python or Rust is pretty easy. Dependencies are declared using...
Announcement
sbomify GitHub Action v0.3.0: Now Faster and Compatible with GitLab!
We’re excited to announce the release of version 0.3.0 of our GitHub Actions module! This update brings some valuable enhancements,...
Announcement
GitHub Action module with Attestation
Over the last few weeks, we’ve made some significant updates to our GitHub Actions module. Since our last update, we’ve added a...
Announcement
Big update to our GitHub Action
In the last few weeks, we’ve worked hard on overhauling the sbomify GitHub Action based on customer feedback. The initial purpose of...
Announcement
Introducing sbomify: Revolutionizing SBOM Management
We’re excited to announce the launch of sbomify, a platform designed to transform how businesses manage and share Software Bill of Materials...
News
Exploring the Future of Software Security: Join Us at BSides Bristol
This weekend marks an exciting event for the cybersecurity community – BSides Bristol is officially kicking off! We’re thrilled to be a part...
Announcement
Announcing sbomify's GitHub Actions Module: Seamlessly Share SBOMs in Your CI/CD Pipeline
We are thrilled to announce the launch of sbomify’s GitHub Actions Module – now available in the GitHub Marketplace! This powerful...
Education
Comparing SBOM Formats: Focus on Component Types in CycloneDX vs. SPDX
CycloneDX and SPDX are two leading SBOM (Software Bill of Materials) standards, each with distinct strengths and support for various...
Guide
How to Generate SBOMs for Python Packages with `pipdeptree` and `cyclonedx-py`
Software Bill of Materials (SBOMs) are essential for ensuring transparency and security in software supply chains. This guide will show you...
Education
What Is Lock File Drift? A Hidden Risk in Dependency Management
A developer adds a new dependency to package.json, runs the application locally, confirms it works, and pushes the change. But they forget...