v0.9.0 — Shareable SBOM URLs
What's new
Shareable SBOM URLs — Instantly generate a secure, hosted viewer link for your SBOM by appending the --share flag to your scan.
- Privacy-first: Includes a strict confirmation prompt before uploading, unless explicitly bypassed with
--share-yesfor CI/CD pipelines. - Telemetry: Added
cli_share_createdevent tracking thehas_share_yesparameter to measure bypass usage. - Safe Empty Scans: Automatically aborts upload if the target path is empty and no artifacts or dependencies are discovered.
- Documentation: Added a new "Share Your SBOM" section to the README and updated the Telemetry & Privacy section to reflect the opt-in upload behavior (data retained for 30 days).
What's not changing
Scanner behavior, exit codes, output formats — all identical to v0.8.x.
Telemetry behavior remains the same as v0.8.0.