Anchore SBOM Action

Version updated for https://github.com/anchore/sbom-action to version v0.22.1.

  • This publisher is shown as ‘verified’ by GitHub.
  • This action is used across all versions by 3,971 repositories.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

This GitHub Action automates the generation of a Software Bill of Materials (SBOM) using Syft, supporting scans of container images, directories, or files. It simplifies SBOM creation, artifact uploads, and publication as GitHub release assets, tackling challenges in software supply chain transparency and compliance. Key capabilities include flexible scanning options, artifact naming, and integration with GitHub releases.

Release notes

v0.22.1

⬆️ Dependencies