Version updated for https://github.com/rezmoss/sbomlyze to version v0.5.3. This action is used across all versions by 0 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary sbomlyze is a GitHub Action that compares two Software Bills of Materials (SBOMs) to detect changes and security issues. It helps identify tampered components and ensures compliance by scoring SBOMs based on NTIA, CISA, and BSI standards. The action provides an immutable SHA for comparison, enabling reliable drift detection without temporary files.

Version updated for https://github.com/rezmoss/sbomlyze to version v0.5.2. This action is used across all versions by 0 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary sbomlyze is an open-source GitHub Action that compares Software Bills of Materials (SBOMs) to detect changes between builds, versions, or releases. It uses component hashes instead of version strings, which helps in identifying package swaps without bumping the version number. This tool is particularly useful for security teams to ensure integrity and compliance in their software supply chain processes.

Version updated for https://github.com/rezmoss/sbomlyze to version v0.5.1. This action is used across all versions by 0 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary sbomlyze is a GitHub Action that compares two Software Bills of Materials (SBOMs) to identify changes and potential security risks. It checks for integrity drift, where a package’s hash changes without updating its version, which can indicate tampering. The action provides detailed reports and compliance scoring capabilities, helping to ensure the integrity and security of software supply chains.

Version updated for https://github.com/rezmoss/sbomlyze to version v0.4.0. This action is used across all versions by 0 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action compares Software Bills of Materials to identify changes in packages, including security issues and integrity risks. It helps organizations ensure that their software supply chain is secure by automatically flagging unauthorized package modifications.