Issues

• plugins: disclose filesystem, network, environment, and subprocess access

  enhancement
  bomly-dev/bomly-cli#418 · Filter by author bomly-guy opened on Aug 31, 2026

• runtime planning: preflight declarative component prerequisites

  enhancement
  bomly-dev/bomly-cli#417 · Filter by author bomly-guy opened on Aug 31, 2026

• engine: isolate component inputs and commit enrichment only on success

  enhancement
  bomly-dev/bomly-cli#416 · Filter by author bomly-guy opened on Aug 31, 2026

• runtime: apply component lifetime scopes to embedded and managed modules

  enhancement
  bomly-dev/bomly-cli#415 · Filter by author bomly-guy opened on Aug 31, 2026

• SBOM export: sign generated SBOMs (attestation / embedded signature)

  enhancement
  bomly-dev/bomly-cli#381 · Filter by author bomly-guy opened on Aug 12, 2026

• SBOM export: per-component supplier and description from real enrichment sources

  enhancement
  bomly-dev/bomly-cli#380 · Filter by author bomly-guy opened on Aug 12, 2026
  3

• Allow auditing existing evidence without enrichment

  bomly-dev/bomly-cli#351 · Filter by author bomly-guy opened on Jul 29, 2026
  1

• Unify match/analyze/audit warnings with the typed detection warning channel

  bomly-dev/bomly-cli#340 · Filter by author bomly-guy opened on Jul 26, 2026