sbom-diff-sentinel

diff SBOMs for drift

SBOM diff gate: compares CycloneDX 1.4-1.6 / SPDX 2.3 SBOMs or git refs, reports added, removed, upgraded and downgraded components plus licence, supplier and hash changes, checks OSV.dev (cached.

• 240/week
• 1★
• MIT
• v1.1.0
• Supply Chain

Read the full README on GitHub (opens in a new tab)View on npm (opens in a new tab)

• supply-chain-sentinel

  one supply-chain gate

• dead-deps-gauge

  find unused dependencies

• dockerfile-sentinel

  lint Dockerfiles for risk

• dotenv-sentinel

  validate .env files