feat(sbom): detector-asserted package origin in SBOM export - #397

Open

bomly-guy wants to merge 4 commits into

mainfrom

claude/sbom-detector-origin

Commits on Aug 18, 2026

feat(detectors): add detector-asserted package origin

bomly-guy
and
claude
committed
b1868c7
feat(detectors): emit package origin from lockfile source fields

bomly-guy
and
claude
committed
130f38d
feat(sbom): publish detector-asserted origin as download and repository locations

bomly-guy
and
claude
committed
406e449
docs(sbom): document detector-asserted package origin; cover it in smoke

bomly-guy
and
claude
committed
a37737d