aboutcode-org / aboutcode-org/www.aboutcode.org
POST: How to exchange data between tools in the software supply chain
Aberta
blog
- Linguagem predominante
- JavaScript
- Estrelas
- 9
- Forks
- 18
- Métricas de merge de PRs
- Nenhum PR com merge em 30d
Descrição
How to exchange data between tools in the software supply chain?
Let's review the current (sad) state of affairs and plot a path forward. Can SBOMs save the day and find their killer app?
We will check SPDX, CycloneDX, PURL, Kissbom, custom formats, and all the menagerie of package manifests and lockfiles, various package registry APIs, VEX specs, and vulnerability data formats like OSV and CVE.org.
Guia de contribuição
Nenhum guia de contribuição indexado para este repositório
Avaliação
Esta issue ainda não foi avaliada.