SBOMs and dependency provenance

Coming soon
AdvancedDifficulty: Advanced
DeveloperAudience: Developer
Security practitionerAudience: Security practitioner
Secure accessPurpose: Secure access

Wave 4 · Implementations and alternatives · T49.09

Coming soon — this article is being prepared. Below are its question, intended outcome, and place in the story.

The question

How can you trace component provenance using an SBOM and build metadata?

What we will work through

Trace component provenance using an SBOM and build metadata.

Before you begin

Previously covered: CI pipelines and verifiable release gates.

Articles

Color theme

Language

Home