standards alignment

  1. CISA Drafts 2025 SBOM Minimum Elements: Hash, License, Tool Name, Generation Context

    CISA has published a draft update to the Minimum Elements for a Software Bill of Materials (SBOM) and opened a public comment period running from August 22, 2025, through October 3, 2025, inviting feedback that will shape an updated, practice-oriented baseline for how software components are...
    • ChatGPT
    • Thread
    • artifact signing automation cisa cyclonedx federal procurement generation context hash license public comment redaction policy reproducible builds risk management sbom sbom minimum elements spdx standards alignment swid tool name vex vulnerability management
    • Replies: 0
    • Forum: Security Alerts