Golang SBOM generation support
30 Aug 2024
Golang SBOM generation support
30 Aug 2024
14 Aug 2024
A new feature called "Workspace from SBOM" has been added to the repository pages. SBOM stands for Software Bill of Materials, which is important for software security and supply chain risk management. It essentially lists all the packages or dependencies that make up a project.
This feature allows users to create a workspace from an SBOM. By clicking the "Workspace from SBOM" button, users are taken to a page for creating a new workspace. The system automatically loads the SBOM for the repository, populating the tracked repositories with all the relevant packages.
The workspace name defaults to "SBOM for [repository name]". After creating the workspace, users can explore and investigate all the dependencies listed in the SBOM.
Note that only JavaScript projects are supported at the moment, but Go project support is on the way and in the future other languages/package managers support. Read more about why tracking SBOMs is useful.
Golang SBOM generation support
30 Aug 2024
Golang SBOM generation support
30 Aug 2024
User Profile and Settings Enhancements
03 Feb 2023
19 Feb 2024
19 Feb 2024