Mohamed Chorfa

#Developer | #Computer #Science

[SBOM-Tools @sbom_tools]

🎉sbom-tools is now listed in the @CycloneDX_Spec Tool Center as Semantic SBOM Diff (sbom-tools).

https://t.co/rN8dUiCoNd

[SBOM-Tools @sbom_tools]

sbom-tools v0.1.21 is out

🩹Bug-fix release:
- view -o json: full vuln detail + dependency_kind
- diff similarity: bounded 0–100
- CRA section in diff reports: compact summary

Thanks @MCh0rfa for all three fixes👏

cargo | brew install sbom-tools

https://t.co/HK5ubKwqBt

[SBOM-Tools @sbom_tools]

Shipped https://t.co/EhpbA25An4 v0.1.20 🚀
This one's all about EU Cyber Resilience Act (CRA) readiness.

- New cra-docs command, generates your Annex V Declaration of Conformity straight from the SBOM - Full CSAF v2.0 round-trip
- Article 24 OSS steward profile for maintainers
- CRA standards-drift detection in `watch`
- 14 compliance levels now, including CNSA 2.0 and NIST PQC

If you're staring down CRA deadlines, this should make life easier.

https://t.co/AVxz4QPojh

[SBOM-Tools @sbom_tools]

🔐sbom-tools v0.1.19 ships a CBOM quality engine that actually grades it:

- Algorithm strength + PQC readiness
- OID & metadata coverage
- Key/cert lifecycle hygiene

sbom-tools quality --profile cbom

https://t.co/AnArME1MO5

[SBOM-Tools @sbom_tools]

🚀https://t.co/EhpbA25An4 v0.1.19 is out: the first open-source CLI/TUI to score CBOM quality, not just parse crypto inventory.

This release puts real weight on PQC readiness and compliance, with scoring aligned to CNSA 2.0 + NIST PQC guidance, and grade caps when there’s zero post-quantum migration.

Full details: https://t.co/bn1j9oLWgC

[Mohamed Chorfa @MCh0rfa]

@jsuarez Super cool 😎 mlflow is so in trouble

[SBOM-Tools @sbom_tools]

🪄✨https://t.co/7zYdVwLlFD v0.1.18 is out

This release brings a major diff engine upgrade, enrichment support across multi-SBOM commands, a full TUI refresh across all 10 tabs, and new Go + Swift bindings (thanks to @MCh0rfa).

Release notes: https://t.co/KdMklKlOhv

[Mohamed Chorfa @MCh0rfa]

@trq212 @hnshah Great insights! Thank you for sharing.
QQ: How do you handle state consistency when multiple subagents modify shared context?

[Mohamed Chorfa @MCh0rfa]

Just shipped "Shai-Hulud Scan" 🐛an educational tool to visualize and analyze the massive Shai-Hulud 2.0 supply chain attack.Check if your deps are affected instantly (runs 100% in-browser!)
https://t.co/KudhT3jNWn
#Cyber #SupplyChainSecurity #Dagger #DevSecOps #OSS #dagger #NPM

[Mohamed Chorfa @MCh0rfa]

@AnthropicAI
This is very annoying!
When I am on max plan I expect not to get interrupted. #brokenUX, #brokenCX, #brokenFlow, #brokenCX, #ux #cx #ox, #ai, #flow, in fact this hindering creativity and limiting. PS: I did not even reach the max context window

[Mohamed Chorfa @MCh0rfa]

Hitting a context/token limit shouldn’t break your flow. All major AI Providers—@OpenAI @AnthropicAI @GoogleAI @xai —should **auto-handoff**: warn users early, summarize work, and guide session continuation. Seamless workflows, no interruptions! #AI #UX #DX #CX

[Mohamed Chorfa @MCh0rfa]

@upstash RBAC at index level?
Index rehydration?
Chunks parity to documents lifecycle?

[Mohamed Chorfa @MCh0rfa]

Hello @Azure
Is there a way to verify a ml or llm model signature before instantiate or deploy it. Within the new service azure for openai.
Assuming the llm model have already it's MLBoM and processed within the @sigstore ecosystem

[Mohamed Chorfa @MCh0rfa]

Turbocharge your llm inference : https://t.co/Xdz1P5YO53

[Fermyon @fermyontech]

Want to build the world's laziest control plane ⁉️

Yes you read that correctly...‼️

Let's see how far @ppog_penguin can push the limits of control plane laziness in his lastest blog https://t.co/Iy6CSLKVt4

#WebAssembly #Wasm #Severless

[Mohamed Chorfa @MCh0rfa]

@Nightbanes https://t.co/XY1FmNaAAP

[Tim Abell @tim_abell]

Serverless WASM. Worth paying attention to.
https://t.co/NFuUQWwMwr ~ @fermyontech

[Mohamed Chorfa @MCh0rfa]

Awesome presentation by @technosophos where we can see the new ERA of cloud computing led by @fermyontech on #HashiTalks: #Deploy Day 2 | https://t.co/XrAjBnTEeM

[Mohamed Chorfa @MCh0rfa]

@jptoto Equivalent to software industry: "it depends 🤪"

[Mohamed Chorfa @MCh0rfa]

Hello @ice_panel, any plan for on-prem deployments?