Deepbits Released Free GitHub Action and SBOM Badge, Enabling Automated Creation and Risk Analysis of Software Bill of Materials (SBOM)

[Riverside, California] - DeepBits, a pioneer in AI-powered software supply chain security and compliance, has announced the release of a free GitHub action and SBOM badge that enables automated creation and risk analysis of software bill of materials (SBOM) from public code repositories. The GitHub action generates SBOMs and analyzes them to find potential risks, such as vulnerabilities, licenses, and malware. The SBOM badge provides transparent and up-to-date information about the software's security and risk posture, including its latest SBOM and threat analysis results.

The new GitHub action, available in GitHub Marketplace, provides developers with an easy-to-use tool for creating SBOMs automatically. With the action integrated into their GitHub workflows, developers can now generate and publish SBOMs for their projects, which can help identify potential risks.

The GitHub action can also analyze the SBOM to find vulnerabilities, malware, and license issues. By identifying these risks early in the development process, developers can take steps to address them before they become more significant problems.

The new SBOM badge can be added to a project's README file or website. By clicking on the badge, users can obtain the latest SBOM and its threat analysis results, including malware, vulnerabilities, and licenses. This helps build trust with users, customers, and other stakeholders by providing transparent and up-to-date information about the software's security and risk posture.

"We're excited to offer these free tools to the open source community," said Heng Yin, CEO of DeepBits. "Our new GitHub action and SBOM badge make it easy to track and manage software dependencies while providing valuable risk analysis information. This helps improve security and reduce risk for everyone involved in the software development process."

The new tools are part of Deepbits' ongoing commitment to providing open source community with the tools and resources they need to develop high-quality, secure open source software.

For more information about Deepbits and its products, please visit www.deepbits.com.