Hackernews posts about SBOMs

RSS feed for SBOMs

01
newGenerating SBOMs with CMakewww.kitware.com
▲ 2Tomte 7d discuss
02
newComponent Hashes in SBOMsworklifenotes.com
▲ 2taleodor 22d discuss
03
newYour SBOM Is Fan Fictionyeet.cx
▲ 8zasc 8d discuss
04
newShow HN: Kennel – Instant SBoM, OSV, End-of-Life Web-Analytics for OCI Containerkennel.blueshoe.io
▲ 2schille 4d discuss
05
newShow HN: Sbm: plain-text bookmarks synced across terminal, browser, Androidsbmsync.com
▲ 4equwal 13d discuss
06
newYocto, RockPi and SBOMs: Building modern embedded Linux imagesvpetersson.com
▲ 161mvip 592d 💬 123
07
newCould lockfiles just be SBOMs?nesbitt.io
▲ 77zdw 286d 💬 62
08
newSBOMs Remain, Attestations Out – Amendments to Executive Order 14144rearmhq.com
▲ 11taleodor 485d discuss
09
newDeterminate Secure Packages: Nixpkgs with SBOMs, FIPS, and SLA'd CVE Patchingdeterminate.systems
▲ 5grhmc 265d 💬 1
10
newFlakeBOM, a CLI for generating SBOMs from Nix flakesdeterminate.systems
▲ 4biggestlou 117d discuss
11
newSBOMs for Medical Devices (2023)danacrane.medium.com
▲ 4mooreds 465d discuss
12
newPackage Cooldown with SBOMswww.interlynk.io
▲ 3surendrapathak 169d discuss
13
newShow HN: Xbom – Generate AI and SaaS-Aware SBOMs from Code Using Static Analysisgithub.com
▲ 3abhisek 476d discuss
14
newC SBOMs, and how pkgconf can solve this problemariadne.space
▲ 3todsacerdoti 604d discuss
15
newLoad Testing ReARM: 20k SBOMs per Run Across Four OCI Registriesrearmhq.com
▲ 2taleodor 34d discuss
16
newFlakeAudit, a CLI for evaluating Nix flake SBOMs against org policiesdeterminate.systems
▲ 2biggestlou 64d discuss
17
newCome Friendly SBOMsfreebsdfoundation.org
▲ 2Tomte 84d discuss
18
newFrom Apertis to SBOMs: Debian Development at DebConf 2026www.collabora.com
▲ 2losgehts 85d discuss
19
newThe Supply Chain in Your AI Agent: Why SBOMs for MCP Servers Matter Nowwww.incredibuild.com
▲ 2zozo123-IB 225d discuss
20
newOpinionated GitHub Action for generating high-quality SBOMsgithub.com
▲ 2todsacerdoti 250d discuss
21
newWhy Most SBOMs Fail and What to Do About Itovalenzuela.com
▲ 2Tomte 467d discuss
22
newSocket Joins TC54 to Help Shape the Future of SBOMs, CycloneDX, and PURLsocket.dev
▲ 2feross 613d discuss
23
newFirmware SBoMs for open source projectsblogs.gnome.org
▲ 2JNRowe 691d discuss
24
newShow HN: Hatch v1.16.0 – workspaces, dependency groups and SBOMshatch.pypa.io
▲ 1ofek 313d 💬 1
25
newA Practical Guide to Accelerating Compliance and Security CI with SBOMswww.buoyant.io
▲ 1PagCatOli 41d discuss
26
newShow HN: Firmware GRC tool that generates OSCAL and SBOMs for 122 controlswww.usenabla.com
▲ 1jdbohrman 391d discuss
27
newBeyond SBOMs: The Real Gaps in Software Supply Chain Transparency
▲ 1scanosss 420d discuss
28
newUsing SBOMs to detect possible Dependency Confusionprotsenko.dev
▲ 1protsenko 426d discuss
29
newBringing Together SBOMs and Advisoriesgithub.com
▲ 1giamma 461d discuss
30
newRust Will Explode, SBOMs Will Be Duds: Open-Source Predictionsthenewstack.io
▲ 1gpi 647d discuss
31
newShow HN: CLI that spots fake GitHub stars, risky dependencies and licence trapsgithub.com
▲ 122artski 512d 💬 72
32
newShow HN: SecureBuild – Zero-CVE Images That Pay OSS Projectssecurebuild.com
▲ 40grantlmiller 473d 💬 17
33
newShow HN: GemGuard: Ruby gem to scan and auto-fix vulnerable dependenciesgithub.com
▲ 3wilburhimself 421d discuss
34
newManaging dependencies in non-manifest languages
▲ 2riteshnoronha16 159d 💬 1
35
newShow HN: DepGuard – Local dependency audit and license compliance (10 pkg mgrs)github.com
▲ 2suhteevah 233d discuss