4 ms·
We use BlackDuck for SBOM at my workplace and let me tell you, the false positives are driving me up a wall. Also, the binary tool seems very primitve (basicall
by JTbane 3y ago
We use BlackDuck for SBOM at my workplace and let me tell you, the false positives are driving me up a wall. Also, the binary tool seems very primitve (basically just takes a SHA1 hash of all your files and compares them to a database).
- mattkopecki 3y agoThis is the problem my company solves. I won’t plug it here, but my email is in my HN profile if you want to reach out