Reduce supply chain risk with SBOM-based dependency scanning

GitLab 19.0 introduces SBOM-based dependency scanning to identify vulnerabilities and reduce supply chain risk.

• •Traces transitive dependencies showing how vulnerable packages entered the project
• •Focuses on vulnerabilities your code uses by checking reachability in Java, JavaScript/TypeScript, and Python
• •Supports 24+ package ecosystems with lockfile and manifest parsing
• •Generates CycloneDX SBOM and reports for compliance integration
• •Enforces scanning across projects using security policies

This summary was automatically generated by AI based on the original article and may not be fully accurate.