SBoM dashboard that pulls from GitHub release assets

Show HN: SBoM dashboard that pulls from GitHub release assets

SBoM dashboard that pulls from GitHub release assets is active in the show hn launch space.

Profile

i've been setting up supply chain security for my project kftray. mainly the release workflow ( https://github.com/hcavarsan/kftray/blob/main/.github/workfl... ) is generating CycloneDX SBOMs with Syft, scanning for vulns with Grype, signing everything with Cosign, and using OpenVEX to suppress false positivesi wanted a simple way to expose a overview about all this without spinning up Dependency-Track or similar.so i built this (public) page that reads directly from GitHub release assets and shows components, vulnerabilities by severity, and also aggregates OpenSSF Scorecard and best practices into a summary card. (https://sbom.kftray.app) basically a simple react/ bun codesource code isn't

Within the show hn launch space, the company focuses on its core offering rather than a broad product line.

Its current recorded stage is Show HN launch.

Website: sbom.kftray.app