---
id: 2632
title: "Reduce supply chain risk with SBOM-based dependency scanning"
source_domain: about.gitlab.com
source_url: "https://about.gitlab.com/blog/sbom-based-dependency-scanning/"
published_at: "2026-05-26 00:00"
tags: ["supply-chain", "appsec", "vulnerability-management", "gitlab", "sbom", "cyclonedx", "dependency-scanning"]
phying_url: "https://phying.com/item/2632"
lang: en
---

# Reduce supply chain risk with SBOM-based dependency scanning

## Summary

GitLab 19.0 makes SBOM-based dependency scanning generally available: it inventories direct and transitive dependencies, traces vulnerable package origins, and ranks findings by real-world exposure.

## Intelligence Metadata

- **Sources:** about.gitlab.com
- **Published:** 2026-05-26 00:00
- **Original:** https://about.gitlab.com/blog/sbom-based-dependency-scanning/
- **Phying News:** https://phying.com/item/2632