The EU Cyber Resilience Act requires SBOMs, signed artifacts, provenance attestations, and vulnerability triage for every release. Right now that means four separate tools, incompatible output formats, and a CI pipeline held together by hope.
brew install sns45/tap/forgeseal