Key capabilities
Secure releases provides a centralized view of your repositories and releases.
You can:
View all monitored repositories in one place
See which releases are actively monitored
Check vulnerability counts by repository and release
Understand coverage and monitoring status at a glance
Vulnerability data is sourced from trusted databases, such as the National Vulnerability Database.
Secure releases functionality:
Associates vulnerabilities with specific releases and components
Categorizes issues by severity
Records detection timestamps for traceability
This enables precise impact analysis when new vulnerabilities are disclosed.
For each monitored release, continuous security monitoring generates and displays a Software Bill of Materials (SBOM) that includes:
Software components and dependencies
Mapped CVEs associated with those components
Version and severity information
SBOM data supports dependency analysis, remediation planning, and compliance requirements.
In addition to vulnerability and component data, Secure releases provides visibility into release integrity.
This helps teams assess the overall trust posture of released software over time, not just point-in-time risk.