“GitHub Action for creating software bill of materials using Syft.”
Local reference
Suspicious dependency
Inferred
Loading file contents…
Loading traits…
Identity
| SHA-256 | 2c07a3f9ea2a8c54492a78712518de6d1a8fe532f7f1b4116e09eacefb8cd065 |
|---|---|
| Canonical SHA-256 | 00fbea8fe969065084e1ff61495fdd0445946505f2bda0e1a575eee2202e21d6 |
| Filename | da167eac915b4e86f08b264dbdbc867b61be6f0c |
| Package | anchore/sbom-action |
| Version | da167eac915b4e86f08b264dbdbc867b61be6f0c |
| PURL | pkg:github/anchore/sbom-action@da167eac915b4e86f08b264dbdbc867b61be6f0c |
Origin
| Source | upload |
|---|---|
| Ecosystem | github |
| Domain | github.com |
| URL | https://codeload.github.com/anchore/sbom-action/tar.gz/da167eac915b4e86f08b264dbdbc867b61be6f0c |
Timeline
| First seen | 25 Aug 2026 16:36 UTC |
|---|---|
| First analyzed | 25 Aug 2026 16:41 UTC |
| Last analyzed | 25 Aug 2026 22:16 UTC |
| Last updated | 25 Aug 2026 22:16 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | 72034 |
Not seeing what you expected? Let us know