“GitHub Action for creating software bill of materials using Syft.”
AI
legitimate SBOM action
Local reference
Suspicious dependency
Inferred
Loading file contents…
Loading traits…
Identity
| SHA-256 | b86092486d360117060a833c19f9a6470ec0cf21fcbd10b8425aebb9f9521a5c |
|---|---|
| Canonical SHA-256 | 0007b0a9433a9ee0d4f2a40adfcd53485ea71bc0bbd6eeccb9a36f6a1e977175 |
| Filename | bb716408e75840bbb01e839347cd213767269d4a |
| Package | anchore/sbom-action |
| Version | bb716408e75840bbb01e839347cd213767269d4a |
| PURL | pkg:github/anchore/sbom-action@bb716408e75840bbb01e839347cd213767269d4a |
Origin
| Source | upload |
|---|---|
| Ecosystem | github |
| Domain | github.com |
| URL | https://codeload.github.com/anchore/sbom-action/tar.gz/bb716408e75840bbb01e839347cd213767269d4a |
Timeline
| First seen | 21 Aug 2026 19:51 UTC |
|---|---|
| First analyzed | 22 Aug 2026 07:24 UTC |
| Last analyzed | 22 Aug 2026 07:29 UTC |
| Last updated | 22 Aug 2026 07:29 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | 4092c |
Not seeing what you expected? Let us know