We made an anime about SBOMs (with a lot of help from @claudeai). Then shipped v0.3.0 🎉 CBOMs now get checked against CNSA 2.0 + post-quantum rules, and if sbom-tools can't tell what an algorithm is. github.com/sbom-tool/sbom-to…

sbom-tools v0.2.0 is live 🚀 - AIBOM support improvements - multi-diff CLI for comparing the entire fleet - 16 compliance standards (+CISA 2026, PCI DSS, FSCT) - CDXA attestation ingestion - SPDX 3.0.1 JSON-LD parsing - sbomqs-compatible scoring output github.com/sbom-tool/sbom-to…

Beyond the powerful TUI, CLI mode packs plenty of little gems for automating analysis and reporting. Side-by-Side diff in CLI mode: sbom-tools diff tests/fixtures/demo-old.cdx.json tests/fixtures/demo-new.cdx.json -o side-by-side

🚀SBOM.Tools v0.1.22: the AI BOM release! Parses CycloneDX ML-BOMs & SPDX 3.0 AI/Dataset, scores AI-readiness, and machine-checks the EU AI Act + G7/BSI. - semantic ML model & dataset diffing - offline/air-gapped mode + cache management - model-weight integrity & Hugging Face enrichment - CISA KEV & EPSS enrichment and more... github.com/sbom-tool/sbom-to…

🎉sbom-tools is now listed in the @CycloneDX_Spec Tool Center as Semantic SBOM Diff (sbom-tools). github.com/CycloneDX/tool-ce…

sbom-tools v0.1.21 is out 🩹Bug-fix release: - view -o json: full vuln detail + dependency_kind - diff similarity: bounded 0–100 - CRA section in diff reports: compact summary Thanks @MCh0rfa for all three fixes👏 cargo | brew install sbom-tools github.com/sbom-tool/sbom-to…

Shipped SBOM.Tools v0.1.20 🚀 This one's all about EU Cyber Resilience Act (CRA) readiness. - New cra-docs command, generates your Annex V Declaration of Conformity straight from the SBOM - Full CSAF v2.0 round-trip - Article 24 OSS steward profile for maintainers - CRA standards-drift detection in `watch` - 14 compliance levels now, including CNSA 2.0 and NIST PQC If you're staring down CRA deadlines, this should make life easier. github.com/sbom-tool/sbom-to…

🔐sbom-tools v0.1.19 ships a CBOM quality engine that actually grades it: - Algorithm strength + PQC readiness - OID & metadata coverage - Key/cert lifecycle hygiene sbom-tools quality --profile cbom github.com/sbom-tool/sbom-to…

🚀SBOM.Tools v0.1.19 is out: the first open-source CLI/TUI to score CBOM quality, not just parse crypto inventory. This release puts real weight on PQC readiness and compliance, with scoring aligned to CNSA 2.0 + NIST PQC guidance, and grade caps when there’s zero post-quantum migration. Full details: github.com/sbom-tool/sbom-to…

🪄✨SBOM.Tools v0.1.18 is out This release brings a major diff engine upgrade, enrichment support across multi-SBOM commands, a full TUI refresh across all 10 tabs, and new Go + Swift bindings (thanks to @MCh0rfa). Release notes: github.com/sbom-tool/sbom-to…