Hackernews posts about SBOMs

1. FlakeAudit, a CLI for evaluating Nix flake SBOMs against org policies (determinate.systems)
   2 points by biggestlou 19 days ago | discuss
2. Yocto, RockPi and SBOMs: Building modern embedded Linux images (vpetersson.com)
   161 points by mvip over 1 year ago | 123 comments
3. Could lockfiles just be SBOMs? (nesbitt.io)
   77 points by zdw 8 months ago | 62 comments
4. SBOMs Remain, Attestations Out – Amendments to Executive Order 14144 (rearmhq.com)
   11 points by taleodor about 1 year ago | discuss
5. Determinate Secure Packages: Nixpkgs with SBOMs, FIPS, and SLA'd CVE Patching (determinate.systems)
   5 points by grhmc 7 months ago | 1 comments
6. FlakeBOM, a CLI for generating SBOMs from Nix flakes (determinate.systems)
   4 points by biggestlou 2 months ago | discuss
7. SBOMs for Medical Devices (2023) (danacrane.medium.com)
   4 points by mooreds about 1 year ago | discuss
8. Package Cooldown with SBOMs (www.interlynk.io)
   3 points by surendrapathak 4 months ago | discuss
9. Show HN: Xbom – Generate AI and SaaS-Aware SBOMs from Code Using Static Analysis (github.com)
   3 points by abhisek about 1 year ago | discuss
10. C SBOMs, and how pkgconf can solve this problem (ariadne.space)
    3 points by todsacerdoti over 1 year ago | discuss
11. Come Friendly SBOMs (freebsdfoundation.org)
    2 points by Tomte about 1 month ago | discuss
12. From Apertis to SBOMs: Debian Development at DebConf 2026 (www.collabora.com)
    2 points by losgehts about 1 month ago | discuss
13. The Supply Chain in Your AI Agent: Why SBOMs for MCP Servers Matter Now (www.incredibuild.com)
    2 points by zozo123-IB 6 months ago | discuss
14. Opinionated GitHub Action for generating high-quality SBOMs (github.com)
    2 points by todsacerdoti 7 months ago | discuss
15. Why Most SBOMs Fail and What to Do About It (ovalenzuela.com)
    2 points by Tomte about 1 year ago | discuss
16. Socket Joins TC54 to Help Shape the Future of SBOMs, CycloneDX, and PURL (socket.dev)
    2 points by feross over 1 year ago | discuss
17. Firmware SBoMs for open source projects (blogs.gnome.org)
    2 points by JNRowe almost 2 years ago | discuss
18. Show HN: Hatch v1.16.0 – workspaces, dependency groups and SBOMs (hatch.pypa.io)
    1 points by ofek 9 months ago | 1 comments
19. Show HN: Manage SBOMs like source code (github.com)
    1 points by miraculixx almost 2 years ago | 1 comments
20. Show HN: Firmware GRC tool that generates OSCAL and SBOMs for 122 controls (www.usenabla.com)
    1 points by jdbohrman 12 months ago | discuss
21. Beyond SBOMs: The Real Gaps in Software Supply Chain Transparency
    1 points by scanosss about 1 year ago | discuss
22. Using SBOMs to detect possible Dependency Confusion (protsenko.dev)
    1 points by protsenko about 1 year ago | discuss
23. Bringing Together SBOMs and Advisories (github.com)
    1 points by giamma about 1 year ago | discuss
24. Rust Will Explode, SBOMs Will Be Duds: Open-Source Predictions (thenewstack.io)
    1 points by gpi over 1 year ago | discuss
25. Show HN: CLI that spots fake GitHub stars, risky dependencies and licence traps (github.com)
    122 points by artski over 1 year ago | 72 comments
26. Show HN: SecureBuild – Zero-CVE Images That Pay OSS Projects (securebuild.com)
    40 points by grantlmiller about 1 year ago | 17 comments
27. Show HN: GemGuard: Ruby gem to scan and auto-fix vulnerable dependencies (github.com)
    3 points by wilburhimself about 1 year ago | discuss
28. Managing dependencies in non-manifest languages
    2 points by riteshnoronha16 4 months ago | 1 comments
29. Show HN: DepGuard – Local dependency audit and license compliance (10 pkg mgrs) (github.com)
    2 points by suhteevah 6 months ago | discuss
30. Show HN: SBoM dashboard that pulls from GitHub release assets (sbom.kftray.app)
    2 points by hcavarsan 7 months ago | discuss
31. Scanoss GitHub Actions Adds Dependency Track Integration
    2 points by scanosss 11 months ago | discuss