Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
bomly-dev
/
bomly-cli
Public
Uh oh!
There was an error while loading.
Please reload this page
.
Notifications
You must be signed in to change notification settings
Fork
0
Star
14
Code
Issues
9
Pull requests
1
Actions
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Security and quality
Insights
feat(sbom): emit package origin and preserve ingested assertions
- #391
#391
Closed
bomly-guy
wants to merge 23 commits into
main
bomly-dev/bomly-cli:main
from
claude/github-issue-380-ab8ba4
bomly-dev/bomly-cli:claude/github-issue-380-ab8ba4
Copy head branch name to clipboard
Conversation
Commits
23
(23)
Checks
Files changed
Closed
feat(sbom): emit package origin and preserve ingested assertions
#391
bomly-guy
wants to merge 23 commits into
main
bomly-dev/bomly-cli:main
from
claude/github-issue-380-ab8ba4
bomly-dev/bomly-cli:claude/github-issue-380-ab8ba4
Copy head branch name to clipboard
Commits
Commits on Aug 14, 2026
feat(sbom): emit package origin and preserve ingested assertions
Show description for c2b05d3
bomly-guy
and
claude
committed
c2b05d3
View commit details
Copy full SHA for c2b05d3
Browse repository at this point
fix(sbom): gate ingested URLs and reject non-userinfo credentials
Show description for f60fae6
bomly-guy
and
claude
committed
f60fae6
View commit details
Copy full SHA for f60fae6
Browse repository at this point
fix(sbom): classify VCS locators before the credential gate
Show description for 7ca8a18
bomly-guy
and
claude
committed
7ca8a18
View commit details
Copy full SHA for 7ca8a18
Browse repository at this point
fix(sbom): keep yarn checksum fragments, gate SPDX source info
Show description for 9ee7d64
bomly-guy
and
claude
committed
9ee7d64
View commit details
Copy full SHA for 9ee7d64
Browse repository at this point
fix(sbom): validate reference types, merge duplicate PURLs, pin revisions
Show description for e39234e
bomly-guy
and
claude
committed
e39234e
View commit details
Copy full SHA for e39234e
Browse repository at this point
fix(sbom): require commit-shaped VCS fragments, keep repo alongside artifact
Show description for 973b0e3
bomly-guy
and
claude
committed
973b0e3
View commit details
Copy full SHA for 973b0e3
Browse repository at this point
fix(sbom): validate ingested digests, keep reference comments and summaries
Show description for 54f4c52
bomly-guy
and
claude
committed
54f4c52
View commit details
Copy full SHA for 54f4c52
Browse repository at this point
fix(sbom): keep CPE 2.2 labels, urn references, and unioned reference sets
Show description for 11a5e67
bomly-guy
and
claude
committed
11a5e67
View commit details
Copy full SHA for 11a5e67
Browse repository at this point
test(sbom): assert digest algorithms, not just counts
Show description for 8ef7310
bomly-guy
and
claude
committed
8ef7310
View commit details
Copy full SHA for 8ef7310
Browse repository at this point
fix(sbom): reject token-shaped revisions, validate BLAKE2b lengths
Show description for 1cb259d
bomly-guy
and
claude
committed
1cb259d
View commit details
Copy full SHA for 1cb259d
Browse repository at this point
fix(sbom): allow benign queries on asserted downloads, union set fields
Show description for c749a9b
bomly-guy
and
claude
committed
c749a9b
View commit details
Copy full SHA for c749a9b
Browse repository at this point
fix(sbom): keep VCS syntax in source info, validate CPEs, map BLAKE3
Show description for 03d0f44
bomly-guy
and
claude
committed
03d0f44
View commit details
Copy full SHA for 03d0f44
Browse repository at this point
fix(sbom): sweep the set-valued and algorithm-mapping classes
Show description for c534b7d
bomly-guy
and
claude
committed
c534b7d
View commit details
Copy full SHA for c534b7d
Browse repository at this point
fix(sbom): validate rendered VCS revisions and every CPE component
Show description for 4dd09b4
bomly-guy
and
claude
committed
4dd09b4
View commit details
Copy full SHA for 4dd09b4
Browse repository at this point
fix(sbom): close the remaining gate, union, and vocabulary gaps
Show description for 09e59b8
bomly-guy
and
claude
committed
09e59b8
View commit details
Copy full SHA for 09e59b8
Browse repository at this point
fix(sbom): parse URLs before splitting revisions
Show description for 679223f
bomly-guy
and
claude
committed
679223f
View commit details
Copy full SHA for 679223f
Browse repository at this point
fix(sbom): close remaining credential shapes and preservation gaps
Show description for bd5d539
bomly-guy
and
claude
committed
bd5d539
View commit details
Copy full SHA for bd5d539
Browse repository at this point
fix(sbom): stop promoting marked registry roots on re-ingest
Show description for 0b2830e
bomly-guy
and
claude
committed
0b2830e
View commit details
Copy full SHA for 0b2830e
Browse repository at this point
fix(sbom): reject credentials in URL paths, sweep the graph merge layer
Show description for 4bc1fc7
bomly-guy
and
claude
committed
4bc1fc7
View commit details
Copy full SHA for 4bc1fc7
Browse repository at this point
fix(sbom): validate rendered VCS revisions and every CPE component
Show description for bd394c3
bomly-guy
and
claude
committed
bd394c3
View commit details
Copy full SHA for bd394c3
Browse repository at this point
fix(sbom): add the missing CPE fuzz target and close credential paths
Show description for c1c3bef
bomly-guy
and
claude
committed
c1c3bef
View commit details
Copy full SHA for c1c3bef
Browse repository at this point
Commits on Aug 18, 2026
fix(sbom): scan for credentials instead of splitting on delimiters
Show description for 56aa7b0
bomly-guy
and
claude
committed
56aa7b0
View commit details
Copy full SHA for 56aa7b0
Browse repository at this point
fix(sbom): re-validate restored locators, merge digests by algorithm
Show description for 172dd33
bomly-guy
and
claude
committed
172dd33
View commit details
Copy full SHA for 172dd33
Browse repository at this point
You can’t perform that action at this time.
