Blog

CRA compliance, SBOM engineering, and security infrastructure — practical guides for builders.

CRAGitHub

What the EU Cyber Resilience Act Means for Your GitHub Repo

The CRA imposes new security obligations on anyone whose software ships in products sold in the EU. Here's what open-source maintainers need to know before September 2026.

July 18, 2026 SBOMTutorial

Generating Your First SBOM in 5 Minutes

Ready-to-run commands for generating a CycloneDX 1.5 SBOM from any Python project. Free, open source, no signup.

July 18, 2026 VulnerabilitiesCompliance

CISA KEV vs CRA: Understanding Vulnerability Reporting Obligations

The CRA requires 24-hour ENISA notification for actively exploited vulnerabilities. Here's what counts — and how to automate your pipeline.

July 18, 2026