2 ms·
GUAC, a great pairing with SLSA (and SBOM)
- Terretta 4y agoSynopsis: "Graph for Understanding Artifact Composition (GUAC) aggregates software security metadata into a high fidelity graph database—normalizing entity identities and mapping standard relationships between them. Querying this graph can drive higher-level organizational outcomes such as audit, policy, risk management, and even developer assistance."