PurpleRay SBOM Analyzer v1.4.0

PurpleRay SBOM Analyzer v1.4.0

Changes:

• fix(ci): make external scanner handoff opt-in
• fix: update sbom analyzer knowledge base

Verify build provenance

Download an artifact and run:

gh attestation verify <downloaded-file> --repo aidamian/PurpleRay_SBOM_Analyzer

Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation. Signing will be activated after project approval. Read the policy.

PurpleRay SBOM Analyzer v1.3.0

PurpleRay SBOM Analyzer v1.3.0

Changes:

• feat: about & 1.3 public release

Verify build provenance

Download an artifact and run:

gh attestation verify <downloaded-file> --repo aidamian/PurpleRay_SBOM_Analyzer

Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation. Signing will be activated after project approval. Read the policy.

PurpleRay SBOM Analyzer v1.2.2

PurpleRay SBOM Analyzer v1.2.2

Changes:

• fix(scan,build): harden startup, path privacy, and release checks
• fix(scan,build): harden startup, path privacy, and release checks

Verify build provenance

Download an artifact and run:

gh attestation verify <downloaded-file> --repo aidamian/PurpleRay_SBOM_Analyzer

Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation. Signing will be activated after project approval. Read the policy.

PurpleRay SBOM Analyzer v1.2.1

PurpleRay SBOM Analyzer v1.2.1

Changes:

• fix: update ver
• fix(ui,launcher): Details report unit, copy/red-row polish, splash lifecycle, batch launcher hardening

Verify build provenance

Download an artifact and run:

gh attestation verify <downloaded-file> --repo aidamian/PurpleRay_SBOM_Analyzer

Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation. Signing will be activated after project approval. Read the policy.

PurpleRay SBOM Analyzer v1.2.0

PurpleRay SBOM Analyzer v1.2.0

Changes:

• feat(ui): collapsible rail, known-issue highlighting, readable Details tab

Verify build provenance

Download an artifact and run:

gh attestation verify <downloaded-file> --repo aidamian/PurpleRay_SBOM_Analyzer

Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation. Signing will be activated after project approval. Read the policy.

PurpleRay SBOM Analyzer v1.1.0

PurpleRay SBOM Analyzer v1.1.0

Changes:

• feat(ui): startup splash and feature-page warm-up

Verify build provenance

Download an artifact and run:

gh attestation verify <downloaded-file> --repo aidamian/PurpleRay_SBOM_Analyzer

Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation. Signing will be activated after project approval. Read the policy.

PurpleRay SBOM Analyzer v1.0.1

PurpleRay SBOM Analyzer v1.0.1

Changes:

• feat: release v1
• chore: meta repo prep
• chore: meta-repo migration

Verify build provenance

Download an artifact and run:

gh attestation verify <downloaded-file> --repo aidamian/PurpleRay_SBOM_Analyzer

Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation. Signing will be activated after project approval. Read the policy.

PurpleRay SBOM Analyzer v0.9.9

PurpleRay SBOM Analyzer v0.9.9

Changes:

• fi: ui re-arrange
• fix: update ver

Verify build provenance

Download an artifact and run:

gh attestation verify <downloaded-file> --repo aidamian/PurpleRay_SBOM_Analyzer

Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation. Signing will be activated after project approval. Read the policy.

PurpleRay SBOM Analyzer v0.9.2

PurpleRay SBOM Analyzer v0.9.2

Changes:

• fix: security finings generation

Verify build provenance

Download an artifact and run:

gh attestation verify <downloaded-file> --repo aidamian/PurpleRay_SBOM_Analyzer

Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation. Signing will be activated after project approval. Read the policy.

PurpleRay SBOM Analyzer v0.9.0

PurpleRay SBOM Analyzer v0.9.0

Changes:

• feat: refresh intelligence and other online checking

Verify build provenance

Download an artifact and run:

gh attestation verify <downloaded-file> --repo aidamian/PurpleRay_SBOM_Analyzer

Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation. Signing will be activated after project approval. Read the policy.