1 year ago

Two major events have served to help bring software bill of materials (SBOMs) further to the forefront as a potential way for organizations to begin to secure their supply chains. Consequently, organizations are now increasingly looking to integrate SBOMs into their DevSecOps processes.

So SBOM is not the entire solution for supply chain security, but it is a critical part of securing the digital supply chain.“

SLSA provides a framework and roadmap so that the industry can start adhering to the implementation of SBOMs and other security good practices for securing the software supply chain.

Again, even the implementation of both an SBOM and SLSA, while they target supply chain protection, are but two components for supply chain protection.