SBOMs

📋 SBOMsSpecific

SBOM, software bill of materials, CycloneDX, SPDX, supply chain security

Feeds to Scour
SubscribedAll
Scoured 58 posts in 13.4 ms

From SBOMs to AI BOMs: Why SPDX 3.0 Matters

 🔌Embedded Systems
malware.news·

You Know What’s In Your Software. But Do You Know What Your AI Agents Are Doing? Enter the AIBOM.

 🤖AI agents  Content type: Blog
medium.com
·

Trying to make sense of package-manager metadata

 🛠️tools
lwn.net·

5 Software Supply Chain Security Best Practices for Development Teams

 🔏SLSA  Content type: Blog
docker.com··Cited by 1 article

Hexana 0.11 (JetBrains IDEs) release — native-image SBOM + CVE

 🛡️Computer Security  Content type: Blog
medium.com
·
Less-relevant results

moby/moby client/v0.5.0-rc.1

 🔏SLSA  Content type: Code  Content type: Release
github.com
·

NCSC Warns Of Rising Software Supply Chain Attacks Targeting Open-Source Packages

 🤖Automation
petri.com·

coreinfrastructure/best-practices-badge sbom-staging-20260611-074ec3d3

 🔧Software Engineering  Content type: Code
github.com
·

OWASP Dependency-Track 5.0 Is Now Generally Available

 🗄️Databases  Content type: Blog
owasp.org··Hacker News

GlassFish 8.0.3 Released: Performance optimizations and security fixes

 🛡️Computer Security
omnifish.ee··r/java

SAST vs SCA: Key Differences for AppSec Teams

 🔍Static Analysis
orca.security·

Announcing Determinate Secure Packages 26.05

 🛡️Computer Security  Content type: Blog
determinate.systems··Hacker News

moby/moby api/v1.55.0-rc.1

 🔏SLSA  Content type: Code  Content type: Release
github.com
·

CRA for Manufacturers

 🔧Right to Repair
thomas-huehn.com··Cited by 1 article

Five Supply Chain Security Risks Hiding Inside Your Mobile Apps

 🔌Embedded  Content type: Blog
supplychainbrain.com·

npm v12 delivers one of the biggest security improvements in years

 🧠AI  Content type: Blog
aikido.dev·

Two-Thirds of Open Source Community Unaware of Cyber Resilience Act

 🌟cool github projects  Content type: News
infosecurity-magazine.com··Cited by 1 article

Meet the new Sovereign Tech Fellows

 🌟Open Source
sovereign.tech··Lobsters·Cited by 2 articles

You can fork a package, but can you own it?

 📘TypeScript
event-driven.io·

Docker Hardened Images enhanced vulnerability scanning with Docker and Aikido

 🛡️Computer Security  Content type: Blog
docker.com·

Keyboard Shortcuts

Navigation

Next / previous item
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Browse
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help