Education
Category · All categories · Blog
Education
SBOM Adoption on PyPI Is at 1.58%. We Can Do Better.
This wasn’t a research project. We were building TEA support into sbomify-action and wanted a way to pull in real SBOM data from a...
Education
PEP 770: SBOMs Are Now a First-Class Citizen in Python Packages
Python now has an official standard for shipping SBOMs inside packages. PEP 770, authored by Seth Larson (Python Security...
Education
Why We're Bullish on TEA, And Why You Should Be Too
Imagine you’re standing in an electronics store, holding a product in your hand. Using a TEA app, you could automatically scan the...
Education
The Role of SBOMs in Cybersecurity: From Visibility to Vulnerability Response
A Software Bill of Materials (SBOM) is a foundational cybersecurity tool that provides a complete, machine-readable inventory of every...
Education
What Is CVSS? Understanding Vulnerability Severity Scoring
The Common Vulnerability Scoring System (CVSS) is an open framework for communicating the severity of software vulnerabilities. Published...
Education
SBOM Scanning: How to Detect Vulnerabilities in Your Software Components
SBOM scanning is the process of analyzing a Software Bill of Materials to identify known vulnerabilities, license issues, and other risks in...
Education
What Is a Dependency in Software? A Beginner's Guide
A dependency in software is any external component – a library, framework, module, or package – that your application relies on to function....
Education
SBOM Generation Tools Compared: Syft, Trivy, cdxgen, and More
SBOM generation tools analyze your software projects and produce machine-readable Software Bills of Materials in standard formats like...
Education
The MIT License: A Complete Guide for Developers
The MIT License is a permissive open source license that allows virtually unrestricted use, modification, distribution, and sublicensing of...
Education
SBOM Management: How to Organize, Track, and Act on Your SBOMs
SBOM management is the practice of organizing, storing, versioning, distributing, and acting on Software Bills of Materials across an...
Education
SBOM Formats Compared: CycloneDX vs SPDX
An SBOM format defines the structure, fields, and serialization of a Software Bill of Materials. Two formats have emerged as industry...
Education
Software Composition Analysis (SCA): What It Is and How SBOMs Fit In
Software Composition Analysis (SCA) is a category of application security tooling that identifies open source and third-party components in...