As the supply chain for software continues to grow in complexity and as attacks on those components grow 📈 #SBOMs will provide the groundwork to manage how those assets get protected at scale says Michael Isbitski of Sysdig in our latest guest blog: https://openssf.org/blog/2023/07/21/manage-how-you-protect-your-assets-at-scale-with-sboms/

🚀 Enrich all of your #SBOMs with Parlay, a new #OpenSource tool from Snyk!

Learn how to use Parlay to make policy-based decisions around package license information and so much more.

https://bit.ly/3ProaDX

Where we are with generating, understanding, managing, & converting #SBOMs and where may the community go in the future? Ivana Atanasova of @VMware takes a look from the SBOM Devroom, hosted at FOSDEM 2023 in Brussels https://openssf.org/blog/2023/05/24/exploring-the-latest-advances-in-sboms-from-the-devroom/

Assessing Product Risk Using SBOMs and OpenSSF Scorecard - guest blog by Daniel Nebenzahl, CTO of Scribe Security on the potential for utilizing #SBOMs with OpenSSF #Scorecard data to evaluate product-level security risks https://openssf.org/blog/2023/04/14/assessing-product-risk-using-sboms-and-openssf-scorecard/

Software Bill of Materials #SBOMs have been with us for the last 10+ years, so do they matter more today than when we started generating them?

Vincent Danen of Red Hat and Tracy Ragan of DeployHub explore in their recent blog - SBOMs so far, so good, so what?

How to make high-quality #SBOMs by John Speed Meyers of Chainguard https://openssf.org/blog/2023/03/02/how-to-make-high-quality-sboms/

Are you interested in addressing open source software #OSS security risk? Software Bill of Materials #SBOMs? Diversity, Equity, and Inclusion #DEI in OSS security? + more. You are invited to the next virtual OpenSSF Town Hall on March 16th at 10 AM. Everyone is welcome. Register at: https://zoom.us/webinar/register/3016764098494/WN_2rz5

A nice little article from Steve Poole
explaining about the importance of #SBOMs for #OpenSource and #SoftwareDevelopment

https://foojay.io/today/sboms-first-steps-in-a-new-journey-for-developers/

Was interesting to see quite a few different slides quoting statistics from Sonatype State of Software Supply Chain Report at @openuk

Looks like it's made impact on quite a few people, and that's understandable because the research team are amazing.

https://www.infosecurity-magazine.com/news/soocon23-open-source-automate-sboms/

#SBOMs #supplychain #cybersecurity