In this post I show how you can create attestations for SBOM documents that you have created for your application or Nuget package

Andrew Lock's blog focuses on ASP.NET Core development, web APIs, and software architecture. Readers can find tutorials, code samples, and explanations covering topics such as RESTful API design, authentication, and authorization in ASP.NET Core. Additionally, they can learn about dependency injection, middleware, and performance optimization techniques.

.NET Escapades

Learn how to create attestations for Software Bill of Materials (SBOM) documents in GitHub Actions. This process helps provide confidence in the dependencies and components used in your NuGet packages or applications. The guide explains how to use GitHub's `actions/attest-sbom` action and addresses the challenges with verifying attestations for NuGet packages due to modifications made by nuget.org.

Creating SBOM attestations in GitHub Actions

Updating a workflow to generate SBOM attestations