News
This Week in SBOMs: PHP2Shell, a Wave of Poisoned Releases, ENISA's SBOM Advisory and Germany's CRA Law
Welcome to the inaugural This Week in SBOMs, a weekly survey of developments within software security, regulation and standards, viewed...
Education
SBOM Adoption on PyPI Is at 1.58%. We Can Do Better.
This wasn’t a research project. We were building TEA support into sbomify-action and wanted a way to pull in real SBOM data from a...
Education
PEP 770: SBOMs Are Now a First-Class Citizen in Python Packages
Python now has an official standard for shipping SBOMs inside packages. PEP 770, authored by Seth Larson (Python Security...
Education
Why We're Bullish on TEA, And Why You Should Be Too
Imagine you’re standing in an electronics store, holding a product in your hand. Using a TEA app, you could automatically scan the...
Education
SBOM Formats Compared: CycloneDX vs SPDX
An SBOM format defines the structure, fields, and serialization of a Software Bill of Materials. Two formats have emerged as industry...
Guide
How to Generate SBOMs for Python Packages with `pipdeptree` and `cyclonedx-py`
Software Bill of Materials (SBOMs) are essential for ensuring transparency and security in software supply chains. This guide will show you...