Skip to content

v0.9.0 — Shareable SBOM URLs

Choose a tag to compare

@lab700xdev lab700xdev released this 04 May 00:24
· 136 commits to main since this release

What's new

Shareable SBOM URLs — Instantly generate a secure, hosted viewer link for your SBOM by appending the --share flag to your scan.

  • Privacy-first: Includes a strict confirmation prompt before uploading, unless explicitly bypassed with --share-yes for CI/CD pipelines.
  • Telemetry: Added cli_share_created event tracking the has_share_yes parameter to measure bypass usage.
  • Safe Empty Scans: Automatically aborts upload if the target path is empty and no artifacts or dependencies are discovered.
  • Documentation: Added a new "Share Your SBOM" section to the README and updated the Telemetry & Privacy section to reflect the opt-in upload behavior (data retained for 30 days).

What's not changing

Scanner behavior, exit codes, output formats — all identical to v0.8.x.

Telemetry behavior remains the same as v0.8.0.