How-to guides¶

Task-focused guides. They assume bomify and the plugins you need are installed, and link to the command reference rather than repeat it.

• Building a package from an SBOM.
• Distributing a package's components to their own endpoints.
• Publishing and pulling packages through an OCI registry.
• Building an SBOM from a Helm chart.
• Composing a multi-medium package from several mediums' SBOMs.
• Scanning with grype, and gating on the results.
• Saving packages for airgapped environments.
• Signing and verifying packages.