Introducing BOMHort: Kubernetes-Native SBOM Visualization & Governance at Scale Joins the OpenSSF Sandbox – Open Source Security Foundation

BOMHort, a Kubernetes-native SBOM ingestion and visualization platform formerly called SeeBOM, has joined the OpenSSF Sandbox. It ingests SPDX, CycloneDX, and in-toto attestations at scale, deduplicates via SHA256, and uses batch OSV lookups plus a daily CVE refresher for continuous vulnerability intelligence, including VEX-aware suppression. It ships license governance based on the CNCF Allowed Third-Party License Policy, uses ClickHouse for sub-second analytics across thousands of SBOMs, and offers a REST API plus an Angular 19 dashboard. It is deployable via Docker Compose, Kind, or Helm charts, and is developed under Apache-2.0 license aimed at helping teams meet EU CRA, NIST SSDF, and Executive Order 14028 compliance requirements.

Source: https://openssf.org/blog/2026/08/28/introducing-bomhort-kubernetes-native-sbom-visualization-governance-at-scale-joins-the-openssf-sandbox. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.