See Contributor Highlights right from your Contributor Insights page

SBOM generation for Workspaces now supports Golang projects! In the example above, this is a generated Workspace from the SBOM for kubernetes/kubernetes. The SBOM is derived from the go.mod files that define what dependencies a project has.

To get started, visit to your favorite Go project's Repository Page on OpenSauced and hit the "Workspace from SBOM" button!

A new feature called "Workspace from SBOM" has been added to the repository pages. SBOM stands for Software Bill of Materials, which is important for software security and supply chain risk management. It essentially lists all the packages or dependencies that make up a project.

This feature allows users to create a workspace from an SBOM. By clicking the "Workspace from SBOM" button, users are taken to a page for creating a new workspace. The system automatically loads the SBOM for the repository, populating the tracked repositories with all the relevant packages.

The workspace name defaults to "SBOM for [repository name]". After creating the workspace, users can explore and investigate all the dependencies listed in the SBOM.

Note that only JavaScript projects are supported at the moment, but Go project support is on the way and in the future other languages/package managers support. Read more about why tracking SBOMs is useful.