Pooja Bolla·1d agoSoftware Supply Chain Security on Kubernetes, Part 2: SBOMs and Vulnerability Gates in GitHub…How I list what’s inside every image, stop the risky ones in CI, and attach that list to the image so it can’t be swapped later.
InKBTG LifebyTinnapat Chaipanich·Oct 28SBOM: ฉลากสินค้าของ Software (ตอนที่ 2) — CBOM: Inventory ของ Algorithm, Key และ Certificateเรารู้ไหมว่าตอนนี้มีระบบไหนบ้างที่ยังใช้ Algorithm ที่ล้าสมัยและไม่ปลอดภัยอีกต่อไป และถ้าต้องเปลี่ยนทันที ระบบไหนบ้างจะได้รับผลกระทบ
InMeetCyberbyCyber Chronicle·Oct 25Your SBOM Passed the Scan—but Did You Deploy the Same Software?The hidden gap in modern DevSecOps: SBOM integrity and artifact provenance.
InMeetCyberbyCyber Chronicle·Oct 24Automating SBOM Generation, Vulnerability Mapping, and Git Commit Signing in CI/CDModern DevSecOps requires more than scanning code. Every build should produce a Software Bill of Materials (SBOM), map dependencies to…
Kevin Mills·Oct 15Your requirements.txt Is Not an SBOMWhy a software bill of materials has to come from a lockfile, and what your manifest is still good for.
InITNEXTbyMohammad-Ali A'RÂBI·Oct 13How to Secure Java Docker Images and Reduce CVE RiskSBOMs, CVEs, Docker Hardened Images, VEX, and Cosign
Daiki Ito·Oct 12The EU’s 24-Hour Clock Is Already Ticking. What Exactly Do You Send ENISA?A practical walkthrough of CRA Article 14 reporting — from SBOM to a submission-ready early warning — and the open-source tool I built to…
Kevin Mills·Sep 30The Hole In Your SBOMYour scanner found nothing in your conda environment. That is not the same as there being nothing to find.
