Record · corpus.blog/posts/01a0ca88-d367-721e-b701-7b029eeb9056

SBOM in Action: finding vulnerabilities with a Software Bill of Materials

Google Security Blog · published 14 June 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at security.googleblog.com Wayback capture

1blogs citing

First cited: 21 Oct 2022
Most recent: 21 Oct 2022
Rank this month: not ranked
External links: 17
Words captured: 1,195

Cited by

Blog

In the post

Date

danaepp.com

Can SBOM help you attack APIs? Read at the source ↗

21 Oct 2022

Links from this post

Link

Host

https://www.ntia.gov/SBOM

ntia.gov

https://cloud.google.com/public-sector/us-federal-cyber-security

cloud.google.com

https://csrc.nist.gov/Projects/ssdf

csrc.nist.gov

https://www.linuxfoundation.org/blog/spdx-its-already-in-use-for-global-software-bill-of-materials-sbom-and-supply-chain-security/

linuxfoundation.org

https://github.com/ossf/criticality_score

github.com

https://github.com/kubernetes-sigs/bom

github.com

https://osv.dev/

osv.dev

https://github.com/advisories

github.com

https://github.com/cloudsecurityalliance/gsd-database

github.com

https://github.com/spdx/spdx-to-osv/

github.com

https://sbom.k8s.io/v1.21.3/source

sbom.k8s.io

https://github.com/golang-jwt/jwt

github.com

https://osv.dev/vulnerability/GO-2020-0017

osv.dev

https://github.com/package-url/purl-spec

github.com

https://spdx.github.io/spdx-spec/external-repository-identifiers/

spdx.github.io

https://www.ntia.gov/files/ntia/publications/vex_one-page_summary.pdf

ntia.gov

https://github.com/spdx/spdx-to-osv

github.com