SBOMlyze Diff

Version updated for https://github.com/rezmoss/sbomlyze to version v0.5.1.

  • This action is used across all versions by 0 repositories.

Action Type

This is a Node action using Node version 24.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

sbomlyze is a GitHub Action that compares two Software Bills of Materials (SBOMs) to identify changes and potential security risks. It checks for integrity drift, where a package’s hash changes without updating its version, which can indicate tampering. The action provides detailed reports and compliance scoring capabilities, helping to ensure the integrity and security of software supply chains.

What’s Changed

Changelog

  • 31503690611fda8ebba4ed2bd186eda000442594 chore(main): release 0.5.1 (#48)
  • 0e6545a162a24b829ead359544d38f093ada99e4 docs(action): update examples to v0.5.0
  • 4ade8ddd3302ea3e247282f4ce2239d6625b6e5d fix(sarif): prevent cross-PR alert collisions (#47)