corpus.blog
41,554 blogs · 4,756,248 posts Claim your blog
Record · corpus.blog/posts/01a0b5ca-2149-71cb-97e0-2e36beb6a631

Are SBOMs any good? Preliminary measurement of the quality of open source project SBOMs

Chainguard Blog · published 21 December 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at chainguard.dev Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
20
Words captured
1,385

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://github.com/tern-tools/tern
github.com
https://github.com/microsoft/sbom-tool
github.com
https://github.com/kubernetes-sigs/bom
github.com
https://github.com/chainguard-dev/apko
github.com
https://github.com/anchore/syft
github.com
https://github.com/aquasecurity/trivy
github.com
https://github.com/chainguard-dev/bom-shelter
github.com
https://thenewstack.io/sbom-everywhere-the-openssf-plan-for-sboms/
thenewstack.io
https://github.com/anchore/grype/tree/main/test/cli/test-fixtures
github.com
https://github.com/spdx/spdx-adoption
github.com
https://spdx.dev/
spdx.dev
https://cyclonedx.org/
cyclonedx.org
https://sourcegraph.com/search
sourcegraph.com
https://github.com/eBay/sbom-scorecard
github.com
https://github.com/spdx/ntia-conformance-checker
github.com
https://github.com/package-url/purl-spec
github.com
https://nvd.nist.gov/products/cpe
nvd.nist.gov
https://www.ntia.doc.gov/files/ntia/publications/sbom_minimum_elements_report.pdf
ntia.doc.gov
https://www.atlanticcouncil.org/in-depth-research-reports/issue-brief/the-cases-for-using-sboms/
atlanticcouncil.org
https://www.crowdcast.io/c/measuring-sbom-quality
crowdcast.io
Elsewhere on chainguard.dev (4)