3 ms·
I think CycloneDX [1] is the go-to SBOM specification these days. [1] https://cyclonedx.org/ https://cyclonedx.org/
by taspeotis 5y ago
I think CycloneDX [1] is the go-to SBOM specification these days.
[1] https://cyclonedx.org/ https://cyclonedx.org/
- mhoad 5y agoI was just digging into Cloud Native Buildpacks (buildpacks.io) as an alternative to Dockerfiles yesterday and realised that they actually have SBOM generation built into them for popular languages which is a really nice easy security infrastructure upgrade for everyone using them.