Quickstart

Deploy

7 container images · sbomify-v26.1.0-20260419.3

Download the docker-compose.yml for this release and start the stack:

curl -LO https://github.com/wellmaintained/packages/releases/download/sbomify-v26.1.0-20260419.3/docker-compose.yml
docker compose up -d

⚠️ Review and update SECRET_KEY and other credentials before production use.

See Dependencies for full image list, digests, and SBOMs.

Audit Pack

sbomify-v26.1.0-20260419.3-compliance.zip

Contains:

• SBOMs — CycloneDX SBOMs for all 7 images
• Vulnerability scans — Grype results with VEX triage
• VEX statements — OpenVEX assessment files
• docker-compose.yml — Pinned deployment manifest
• release.json — Release metadata

Previous Releases

Historical releases and compliance bundles are available at GitHub Releases.