Get an overview of the SPDX software bill of materials specification. See SPDX SBOM use cases, document structure, data fields, and more.| fossa.com
A comprehensive overview of SBOMs (software bill of materials): their data fields, use cases, and formats, why they’re needed, and how to manage them.| fossa.com
Learn about VEX (Vulnerability Exploitability eXchange), which is used to communicate whether vulnerabilities impacting software products are actually exploitable.| Dependency Heaven
NIST has finalized SP 800-218A, Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile. This publication augments SP 800-218 by adding practices, tasks, recommendations, considerations, notes,...| csrc.nist.gov
A new version of the CycloneDX bill of materials specification has been released. See what's new in CycloneDX v1.5.| Dependency Heaven