FLOSS Weekly 528

CycloneDX is a lightweight software bill-of-material (SBOM) specification designed for use in application security contexts and supply chain component analysis.

Download or subscribe to this show at https://twit.tv/shows/floss-weekly

Here's what's coming up for FLOSS in the future.

Think your open source project should be on FLOSS Weekly? Email Randal at merlyn@stonehenge.com

Thanks to Lullabot's Jeff Robbins, web designer and musician, for our theme music.

Links

• OWASP - Component Analysis
• CycloneDX
• Dependency Track
• NTIA Software Component Transparency
• Software Package Data Exchange
• National Vulnerability Database - SWID
• Purl-Spec GitHub