Search results

Support OCI container image dependency resolution

discussionLong-term tasks requiring community discussionLong-term tasks requiring community discussion

Status: Open.

#44 In SBOMit/sbomit;

· absol27 opened on Apr 21, 2026

Move from regex/path-based package resolution to hash-based package identification

discussionLong-term tasks requiring community discussionLong-term tasks requiring community discussion

Status: Open.

#43 In SBOMit/sbomit;

· absol27 opened on Apr 21, 2026

Feature: Add CI Workflow for Build/Test/Lint

Status: Open.

#42 In SBOMit/sbomit;

· Jaydeep869 opened on Apr 21, 2026

Bug: OOM Risk in Witness Parsing

Status: Open.

#41 In SBOMit/sbomit;

· Jaydeep869 opened on Apr 21, 2026

Bug: Data Loss During Network Package Deduplication

Status: Open.

#40 In SBOMit/sbomit;

· Jaydeep869 opened on Apr 21, 2026

Bug: Incomplete JavaScript/NPM Dependency Resolution

Status: Open.

#39 In SBOMit/sbomit;

· Jaydeep869 opened on Apr 21, 2026

Bug: File Descriptor Leaks in Generator

Status: Open.

#38 In SBOMit/sbomit;

· Jaydeep869 opened on Apr 21, 2026

Add unit tests for the attestation parser

Status: Open.

#36 In SBOMit/sbomit;

· IITI-tushar opened on Apr 20, 2026

Non-Compliant Custom UUID Generation in generator.go

Status: Open.

#35 In SBOMit/sbomit;

· Jaydeep869 opened on Apr 18, 2026

Hardcoded generator tool version prevents accurate artifact tagging in releases

Status: Open.

#33 In SBOMit/sbomit;

· Jaydeep869 opened on Apr 17, 2026

docs: align README with actual default attestation types and pipeline

Status: Open.

#28 In SBOMit/sbomit;

· kazuhidelee opened on Apr 7, 2026

Feature Request: Add a --summary CLI flag to output high-level SBOM metrics

Status: Open.

#27 In SBOMit/sbomit;

· corepacket opened on Apr 7, 2026