Switch from GitHub to Your product
Scripts that call GitHub's synchronous SBOM API: a change is due by November 13. You can stay on GitHub. If you would rather leave, here is how to move to Your product.
What changes at GitHub
GitHub removes its old SBOM endpoint on November 13, 2026. It is the synchronous one at /dependency-graph/sbom. Move your scripts to the new endpoint. It gives you a URL to check until the file is ready.
- Removal: November 13, 2026 (GitHub)
- Old endpoint: /{owner}/{repo}/dependency-graph/sbom (GitHub)
- New endpoint: /{owner}/{repo}/dependency-graph/sbom/generate-report (GitHub)
- How the new one works: It returns a URL that you poll; the finished SBOM is cached for download (GitHub)
- Announced: May 12, 2026 (GitHub)
- Scripts on the old endpoint: Must move before November 13, 2026 (GitHub)
You can stay on GitHub if you make the change. This page is for people who would rather leave.
What Your product gives you
Write two or three short lines here. Say what Your product does, who it is for, and what it costs. Use only facts you can show.
How to move from GitHub to Your product
- Poll for the file. Wait on the URL it returns, then download the SBOM.
- Import into Your product. Say which files you accept and how long an import takes.
Tell readers the key date: November 13, 2026.
Questions people ask
If Your product has a direct answer to one of these, add it here. Keep it short and true.
How to help new users settle in
Send one short email. Say what changed, where to find you now, and what they need to do. Put the most important line first.
If there is a date, send a short reminder a few days before it. Keep a copy of the list you sent it to.
Sources
- Synchronous SBOM API deprecated — GitHub (primary), checked 2026-10-17