aboutcode-org / aboutcode-org/www.aboutcode.org
POST: How to exchange data between tools in the software supply chain
Abierto
blog
- Lenguaje dominante
- JavaScript
- Estrellas
- 9
- Forks
- 18
- Métricas de merge de PR
- Sin PR fusionados en 30 d
Descripción
How to exchange data between tools in the software supply chain?
Let's review the current (sad) state of affairs and plot a path forward. Can SBOMs save the day and find their killer app?
We will check SPDX, CycloneDX, PURL, Kissbom, custom formats, and all the menagerie of package manifests and lockfiles, various package registry APIs, VEX specs, and vulnerability data formats like OSV and CVE.org.
Guía de contribución
No hay ninguna guía de contribución indexada para este repositorio
Evaluación
Este issue todavía no se ha evaluado.