Git diff for SBOMs—compare CycloneDX, SPDX, and Syft documents, detect tampering, and gate CI.
cli golang security dependency-graph compliance spdx software-supply-chain devsecops syft drift-detection sbom github-actions cyclonedx supply-chain-security sbom-tool ntia sbom-quality sbom-score sbom-action sbom-diff
-
Updated
Sep 1, 2026 - Go