Blog
๐ SBOM Signing โ Security
Just because an SBOM is signed doesnโt mean itโs safe. Signing is still important though. It gives you integ...
The Evolution of SBOMs at OwnersBox
I gave a presentation at the CISA SBOM Community Weekly Meeting yesterday where I shared how we approached SBOMs in my latest r...
๐ What Makes Signing SBOMs Hard in Practice?
Everyone agrees SBOMs should be signed. But actually doing it? Thatโs where things get messy. Letโs t...
Your SBOM Can Be Hacked ๐ฆ๐
Yes, even the one you just generated. An SBOM (Software Bill of Materials) is supposed to bring transparency and trust t...
Why SBOMs Are Not One-and-Done ๐ฆ๐
โ Youโve generated an SBOM. Congratulations! But hereโs the truth. An SBOM is not a report you create once a...
๐ช๐ต๐ผ ๐ฎ๐ฐ๐๐๐ฎ๐น๐น๐ ๐ฏ๐๐ถ๐น๐ฑ๐ ๐ฆ๐๐ข๐ ๐? ๐๐ป๐ฑ ๐๐ต๐ผ ๐ป๐ฒ๐ฒ๐ฑ๐ ๐๐ต๐ฒ๐บ? ๐ค๐
SBOMs are a critical tool for understanding your software supply chain. But not everyone touches an SBOM the same way. T...