A software bill of materials (SBOM) has become a crucial piece of documentation, one that can help businesses and developers stay in compliance with security policies and rest assured they aren’t using or building on top of a platform filled with vulnerabilities. In a previous tutorial, I’ve already covered how to build an SBOM for container images with Syft.

Read full article on The New Stack