Education
The Role of SBOMs in an OBOM: Ensuring Compliance and Security in Smart Thermometer Development
In today’s software landscape, compliance with security and transparency mandates is more critical than ever. Executive orders, such...
Education
Enhancing Dependency Management with GitHub's Dependency Graph: An Analysis
Introduction In the evolving landscape of software development, dependency management is a critical component. GitHub’s dependency graph is...
Education
Framing Software Component Transparency: Establishing a Common Software Bill of Materials (SBOM)
As the digital world grows ever more complex, the tools we use to ensure software security and transparency must evolve. The 2nd edition of...
News
Get the latest SBOMs from the top 15 most popular images on Docker Hub
Most companies that use Docker also use Docker Hub in some capacity. Have you ever wondered how secure these images are? In our article...
Guide
Comprehensive Guide to Generating and Understanding SBOMs with Docker and Django-CMS
It’s fair to say that SBOMs (Software Bill of Materials) is a rapidly emerging field. Many vendors, like Docker and GitHub, now offer...
News
Call for Views on the Code of Practice for Software Vendors: Ensuring Security and Resilience
The UK government has launched a call for views on a new voluntary Code of Practice for Software Vendors. This initiative aims to enhance...
Education
Enhancing SBOM Sharing: A Look at Current Practices and the Role of sbomify
Software Bill of Materials (SBOM) sharing is becoming increasingly vital in our interconnected digital ecosystem, where security and...
Compliance
Understanding ISO 42001 and the Integration of SBOMs for Enhanced Operational Resilience
Introduction to ISO 42001 In an era marked by rapid technological advances and complex interdependencies, businesses increasingly prioritize...
Compliance
Harnessing ISO 27001 and SBOMs for Enhanced Information Security Management
Introduction to ISO 27001 As businesses navigate the complex landscape of cyber threats, ISO 27001 emerges as a vital standard for...
Education
Exploring the New SPDX 3.0: A Game Changer for SBOMs
TL;DR: SPDX 3.0 is the latest update to the Software Package Data Exchange standard, significantly enhancing the way Software Bill of...
Education
What Is OpenSSF? Scorecards, SLSA, and the Open Source Security Ecosystem
After the Log4Shell vulnerability exposed how a single widely-used open source library could affect hundreds of thousands of organizations,...
Compliance
How SBOMs Streamline SOC 2 Compliance: Insights for the Agile Enterprise
Decoding SOC 2 Compliance for Agile Enterprises For agile enterprises aiming to assure clients that their data is in safe hands, SOC 2...