HCP Packer adds SBOM vulnerability scanning

HCP Packer introduces SBOM vulnerability scanning in public beta, enabling platform teams to identify security risks in image artifacts earlier in the deployment pipeline.

• •SBOM (Software Bill of Materials) scanning checks image artifacts against MITRE's CVE database to identify known vulnerabilities
• •Vulnerabilities are classified by severity, showing which package versions are affected and when they were detected
• •Package visibility feature, previously in beta, is now generally available (GA)
• •The feature supports system images such as AMIs, virtual machines, and Docker containers across hybrid-cloud environments
• •Organizations can use this to streamline compliance efforts and prioritize remediation of security risks in their software supply chain