Low Severity
Published: Oct 25, 2026
Continuous SBOM diff & vulnerability watch with maintainer-change tracking
<a name="top"></a>
<div align="center">
<img src="https://capsule-render.vercel.app/api?type=rect&color=0:6b46c1,100:2b6cb0&height=120§ion=header&text=SBOMGATE&fontSize=48&fontColor=ffffff&fontAlignY=58" width="100%" alt="SBOMGATE"/>
# SBOMGATE
### Continuous SBOM diff & vulnerability watch with maintainer-change tracking
<img src="https://readme-typing-svg.demolab.com?font=Fira+Code&size=18&duration=3500&pause=1000&color=6B46C1¢er=true&vCenter=true&width=720&lines=Continuous+SBOM+diff++vulnerability+watch+with+maintainercha;Self-hostable+%C2%B7+MCP-native+%C2%B7+CI-ready+%C2%B7+polyglot" width="720"/>
[](https://pypi.org/project/cognis-sbomgate/) [](https://github.com/cognis-digital/sbomgate/actions) [](LICENSE) [](https://github.com/cognis-digital)
*Blue Team / Defense — detection, deception, and monitoring for small teams.*
</div>
```bash
pip install cognis-sbomgate
sbomgate scan . # → prioritized findings in seconds
```
<!-- cognis:example:start -->
## 🔎 Example output
Real, reproducible output from the tool — runs offline:
```console
$ sbomgate-emit --version
sbomgate 0.1.4
```
```console
$ sbomgate-emit --help
usage: sbomgate [-h] [--version] <command> ...
Continuous SBOM diff & vulnerability watch with maintainer-change tracking.
positional arguments:
<command>
scan diff two SBOMs and/or match vulnerabilities, then gate
diff diff two SBOMs (added/removed/version/maintainer)
vulns match one SBOM against a local advisory feed and/or the bundled
DB
db query the bundled offline OSV vuln DB