
SBOM and Software Supply Chain
The Cloudcast
00:00
The Power of Distributed Computing in the Software Supply Chain
S-bomb is a software bill of materials that says, what's in a piece of software? And this is actually what's driving, or driving force between the federal guidelines. If you sell software to the government, you now need to prove that these are for your software. What folks maybe aren't as familiar with the concept of S-bomb may not get it right at first. But after you've given it to somebody and they add new things to it, how does it get used again? You know anybody who's worked on the product side of things typically have a manifesto or something that says, hey, we're going to do this way.
Transcript
Play full episode