Top
image credit: rawpixel.com / Freepik

OpenSSF Adds Attestations to SBOMs to Validate How Software is Built

January 3, 2024

Via: InfoQ

The Open Source Security Foundation (OpenSSF) has recently announced SBOMit, a tool designed to bolster Software Bills of Materials (SBOMs) with in-toto attestations. This development, announced under the OpenSSF Security Tooling Working Group, increases transparency and security in the software development process.

Software Bills of Materials (SBOMs) serve as an inventory of components within a software package.

Read More on InfoQ