October 24, 2022

SBOMs are critical to software supply chain security — but only the first step in your journey

SBOMs are key to software supply chain security. But they are also only the first step on your software supply chain journey. Here's what you need to know.
October 18, 2022

A software bill of materials (SBOM): What it is — and why it matters for software supply chain security

Software bills of materials (SBOMs) have become key to mitigating threats to the software supply chain. Here's what you need to know to put them to work.
October 17, 2022

SBOMs are a 'no brainer': 4 takeaways from MITRE's software supply chain security summit

MITRE's software supply chain security summit highlighted software companies and government agree that SBOMs are essential.
October 12, 2022

Packagist PHP repo supply chain attack: 3 key takeaways

A PHP repository vulnerability threatened millions of sites. Here's why you need to make an SBOM the first step in your software supply chain security journey.
September 19, 2022

White House memo lays down the law on software supply chain security

The new memorandum calls on firms selling software to the federal government to attest to its conformity with NIST security standards. Here's what you need to know.
September 14, 2022

OpenSSF's npm best practices: A solid first step for software supply chain security — but trust issues remain

Here's what you need to know about the new OpenSSF npm security best practices.