SPDX @SPDXTeam

An open standard for communicating software bill of material (SBOM) information, including components, licenses, copyrights, and security references. spdx.github.io/spdx-spec/ spdx.dev Joined August 2017

Tweets

125
Followers

415
Following

124
Likes

978

ELISA Project @ProjectElisa

3 years ago

Join the #linux community on Oct. 11 for an #ELISASeminar that focuses on the Road to Safe Space Exploration presented by Ivan Perez Dominguez, Senior Research Scientist at @NASAAmes. Learn more & register: hubs.la/Q024fssH0 @ProjectElisa @NASA #opensource #ELISAProject

1 4 11 6K 0

View Details

OpenSSF @openssf

3 years ago

#SBOM alone may not encode enough detail to separate non-exploitable vulnerabilities from exploitable ones writes Surendra Pathak in our latest guest blog on VDR, VEX, OpenVEX & CSAF openssf.org/blog/2023/09/0…

0 6 9 714 0

View Details

Allan is @allanfriedman on bsky & infosec.exchange @allanfriedman

3 years ago

Cisco announces SBOMs for recent @cisco products. Great @jefschut blog highlighting 1) the importance of transparency, 2) acknowledging that #SBOM implementation will be a journey, but that 3) we all have to start now for better #supplychain security blogs.cisco.com/security/demon…

1 13 28 2K 2

View Details

FOSSA @getfossa

3 years ago

.@SPDX_SBOM v3.0 is in the works, and it's expected to include several major changes from the current v2.3. Get an early look at what to expect — such as support for emerging BOM use cases like AI and data — in our new blog. #SBOM @SPDXTeam fossa.com/blog/spdx-3-0/

0 6 8 1K 0

View Details

Allan is @allanfriedman on bsky & infosec.exchange @allanfriedman

3 years ago

Fun! A think tank analysis combines my passion for both Taylor Swift and #SBOM. Nice job by @DFRLab & @AtlanticCouncil @CyberStatecraft for unpacking some of the common (and dare we say imperfect) concerns about SBOM from beltway lobbyists. dfrlab.org/2023/07/19/why…

0 6 13 2K 1

View Details

SPDX SBOM @SPDX_SBOM

3 years ago

Providing Transparency at Software Development’s core process: build time by @lumjjb and @_ctlfsh spdx.lfprojects.linuxfoundation.org/providing-tran…

1 3 2 305 1

View Details

SPDX @SPDXTeam

3 years ago

Excellent summary of what the team got up to during the SPDX Minisummit last month!

SPDX SBOM @SPDX_SBOM

3 years ago

Unpacking the SPDX 3.0 Tooling Mini Summit: A New Era of Compliance and Security spdx.dev/unpacking-the-…

0 1 4 305 1

0 1 3 196 0

View Details

Omkhar Arasaratnam @_omkhar

3 years ago

I look forward to attending the SBOM-a-rama next week in Los Angeles, hosted by the @CISAgov. @theopenssf and @spdxteam believe SBOMs are a core part of securing our Open Source supply chain. Let me know if you'll be there! cisa.gov/sbom-2023-agen…

0 2 4 183 0

View Details

Mike D. @mdolan

3 years ago

If you don't submit a comment, the USPTO will make it easier and more profitable for patent trolls to target #opensource users with bogus claims.

The Linux Foundation @linuxfoundation

3 years ago

The USPTO has issued proposed rules that will make it harder for everyone in #opensource to challenge bad #patents. Let them know you want a fair and open system for all, where anyone can seek a review of an invalid patent. Provide your comment: hubs.ly/Q01SLr490

0 15 32 14K 1

0 4 9 1K 0

View Details

Jordi Mon Companys @JordiMonPMM

3 years ago

Packed venue for @jzemlin’s opening keynote at #OSSummit in Vancouver, BA 🇨🇦

0 4 13 513 0

View Details

Allan is @allanfriedman on bsky & infosec.exchange @allanfriedman

3 years ago

Excited to get the perspectives of @_kate_stewart and @chrisblask on what the world will look like when #SBOM is ubiquitous.

2 2 23 878 0

View Details

Zephyr Project @ZephyrIoT

3 years ago

Software #supplychain transparency is emerging w/ #SBOMs. In this @RSAConference talk on April 25 at 9:40 am, @linuxfoundation's @_kate_stewart & @cybeatstech's @chrisblask present best practices that improve IP control, lower operational costs & more: hubs.la/Q01MgNN80

0 2 5 659 0

View Details

puerco @puerco

3 years ago

📢bom v0.5.1 the @kubernetesio SPDX SBOM tool is out! This release embeds the @SPDXTeam license list to generate SBOMs in airgapped envs, adds support for apk packages + lots of bug fixes Big thanks to @sbs0x @developerguyba @rosejudge5 and @comedordexis for contributing!

1 6 22 2K 2

View Details

SPDX @SPDXTeam

3 years ago

🎉Excited to see that an SPDX SBOM can now be generated by a push of an export button! Thanks for making things easier for all the open source developers on @github! Awesome work @jhutchings0

Justin Hutchings @jhutchings0

3 years ago

Need an SBOM and not sure where to start? Now you can get an SBOM with the push of a button. github.blog/2023-03-28-int…

1 5 14 4K 1

2 5 17 3K 1

View Details

Anchore @anchore

3 years ago

Get the latest on the SBOM Everywhere working group from @joshbressers and @_kate_stewart in this new @theopenssf blog post. #sbom #security #opensource

OpenSSF @openssf

3 years ago

SBOM Everywhere Update and Python SPDX-Tools hubs.la/Q01Jjd140 #SBOM #SPDX #Python #OSS #OpenSource #OSSsecurity

0 4 5 1K 0

0 1 4 206 0

View Details

All Things Open @AllThingsOpen

3 years ago

Check out "Open Source Law Policy and Practice Book Panel" with Amanda Brock (@amandabrockUK), Jilayne Lovejoy (@jilaynelovejoy), Kate Stewart (@_kate_stewart ), Karen Sandler (@o0karen0o), Nithya Ruff (@nithyaruff) & Pamela Chestek (@pchestek) on YouTube! youtu.be/KaOE1J8ycJs