SBOM Scanner on Kubewarden

SBOMscanner 0.12 Release: Full-Stack Security with Node Scanning

Tue, 07 Jul 2026 00:00:00 +0000

We are thrilled to announce the release of SBOMscanner v0.12.0! With this version, SBOMscanner takes a big step forward in its mission to provide a complete, SBOM-based security picture of your Kubernetes clusters. The highlight of this release is the brand new Node Scan feature, which extends visibility from container images all the way down to the nodes that run them.

Why scan nodes?

Until now, SBOMscanner focused on what runs inside your cluster: container images pulled from your registries and, more recently, the workloads actually deployed on the cluster. That is a big part of the story, but it is not the whole story.

SBOMscanner 0.11.0 release

Wed, 06 May 2026 00:00:00 +0000

We are happy to announce SBOMscanner v0.11.0. This release introduces an MCP server for AI assistants, a new way to target a subset of a registry from a ScanJob, supply chain hardening with zizmor, and several fixes for race conditions in the storage controller watches.

MCP server

SBOMscanner now ships an MCP server that puts everything the controller knows in front of your AI assistant of choice. Instead of crafting kubectl queries across CRDs and joining the results in your head, you can ask Claude, Claude Code, GitHub Copilot, or any other MCP client questions like “which workloads in cluster prod are running an image with a critical CVE?”, “give me the top ten most vulnerable images across all my registries”, or “open a scan for the new tag I just pushed to library/nginx”. The assistant calls into SBOMscanner to list registries, scan jobs and workloads, inspect specific CVEs, follow scan progress, manage VEX hubs, and (when you want it to) create, update, or delete the corresponding resources for you.

SBOMscanner 0.10 Release

Tue, 10 Mar 2026 00:00:00 +0000

The Kubewarden ecosystem continues to expand its supply chain security capabilities! Hot on the heels of the Admission Controller 1.33 release, we are excited to announce SBOMscanner v0.10.0. This release introduces powerful new features and critical stability fixes. Let’s dive in!

Workload Scan

Until now, SBOMscanner required explicit Registry configurations to scan images. However, what usually matters most are the images actively running in your cluster.

The new Workload Scan feature automatically discovers and scans container images based on live workloads.

The year in review: Kubewarden's progress in 2025

Wed, 07 Jan 2026 00:00:00 +0000

Join us in celebrating a fruitful 2025 for the Kubewarden project!

The team has spent time planting kernels and enjoying the fruit of the grown ideas. Let’s look together at what the basket brings as we say ciao to 2025. Grab anything you like for the trip!

Expanding the Scope: Introducing SBOMScanner

2025 saw Kubewarden expand beyond admission policies with the introduction of SBOMScanner, a new project donated to CNCF under the Kubewarden umbrella.

Expanding Kubewarden Scope

Tue, 11 Nov 2025 00:00:00 +0000

The Kubewarden project was created four years ago at SUSE with the goal of redefining Policy As Code. We built a universal policy engine for Kubernetes and donated it to the CNCF.

When the project started, policies could only be written in Rust and Go. Since then, we’ve worked to increase flexibility. Today, policies can also be written in other programming languages such as C#, and even JavaScript and TypeScript (stay tuned for the upcoming announcement).