Engineering notes

Blog

How bomwerk builds software inventories you can hand to an auditor — and the trade-offs behind them. No hype, concrete numbers, limitations stated.

  • Why bomwerk never shells out to git

    Running git inside a repo you are scanning makes that repo's config your problem. Here is what we read instead, and what it cost us.