Upload an SBOM or lockfile
No account needed. Upload one file or several.
Your report stays available for 24 hours. Sign in and save it to a project to track changes over time.
Start with your repository
Pick the public or private repositories you want to check. sbomtriage reads their dependency manifests and gives you a prioritised plan.
- Select the repositories the app can access
- Review findings and recommended upgrades
- Compare changes across saved scans
Connect GitHubFree during early access, once you’ve answered four questions: scan whenever you want, plus daily monitoring.