BOMnipotent - SBOM and CSAF Distribution

This update introduces the “bom/csaf get” command to directly print the contents of a document. This simplifies the integration with the vulnerability checker grype. Additionally, a new option in “vulnerability upload” allows to provide the product version, which mitigates a small bug in grype.

A full changelog can be found here . Spoiler: It contains no more than one additional bulletpoint. There’s only so much I can develop in a single week.

Accompanying this update is a new batch of documentation, describing how you can manage supply chain security documents with BOMnipotent.

As a bonus, merely three months after requesting it, I received my VAT! Weichwerke Heidrich Software is now fully equipped to operate internationally.