Episode 364 - Using SBOMs is hard

Open Source Security

Josh and Kurt talk about SBOMs. Quite a bit has happened in the world of SBOMs in the last year or so. There are going to be different types of SBOMs, like build, source, or runtime. Each will tell us different things depending on what we need to know. We also cover some of the community efforts happening around SBOMs. They're still not easy to use, but it's better better.

Show Notes

• SBOM Types draft
• SBOM Drift
• OpenSSF SBOM Everywhere