“GitHub Action for creating software bill of materials using Syft.”
Local reference
Suspicious dependency
Inferred
Loading file contents…
Loading traits…
Identity
| SHA-256 | 24fd03d2e8255dda49c81faaca612ac07cc7d21ff0bc79692e4c065a1a4edd72 |
|---|---|
| Canonical SHA-256 | 000877d1b0f3d96fa96340eacd5e83109ed2166e0698a934c1ed2bd2a5d78e51 |
| Filename | 9f7302141466aa6482940f15371237e9d9f4c34a |
| Package | anchore/sbom-action |
| PURL | pkg:github/anchore/sbom-action |
Origin
| Source | upload |
|---|---|
| Ecosystem | github |
| Domain | github.com |
| URL | https://codeload.github.com/anchore/sbom-action/tar.gz/9f7302141466aa6482940f15371237e9d9f4c34a |
Timeline
| First seen | 25 Aug 2026 20:47 UTC |
|---|---|
| First analyzed | 25 Aug 2026 21:20 UTC |
| Last analyzed | 25 Aug 2026 21:48 UTC |
| Last updated | 25 Aug 2026 21:48 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | 72034 |
Not seeing what you expected? Let us know