Announcement
Announcing sbomify v26.9.0: The One That Speaks SPDX 3
If you generate SBOMs from an embedded Linux build, you have probably had a version of this experience with us: the document uploads,...
Announcement
Announcing sbomify v26.8.0: The One With Security Advisories
Most vulnerability tooling stops at the moment of discovery. You get a finding, a severity, maybe a fix version, and then you are on your...
Announcement
Announcing sbomify v26.7.1: The One That Says "Not Affected"
An SBOM tells you what is in your software. A vulnerability scanner tells you which of those components have known CVEs. Neither answers the...
Announcement
Announcing sbomify v26.1.0: The One Where We Switch to CalVer
If you have been following along, you may have noticed the version number just made a fairly dramatic jump, going from v0.27 straight to...
Education
Enhancing SBOM Management for Software Buyers with sbomify
CTOs and CISOs responsible for software procurement face a growing challenge: ensuring that the software their organizations depend on is...
Education
SBOM Management for Software Vendors: A Complete Guide to sbomify
Software vendors face growing pressure to provide Software Bills of Materials to their customers. Regulatory frameworks like Executive Order...