sbom 6
- Supply Chain Security in CI: SBOMs, SLSA, and Sigstore
- How to Lead a Review of SBOMs and Build Provenance
- Measuring SBOMs and Build Provenance Without Vanity Metrics
- Turning Requirements for SBOMs and Build Provenance into Delivery Guardrails
- Designing SBOMs and Build Provenance: Trust Boundaries, Failure Modes, and Tradeoffs
- A Practical Risk Model for SBOMs and Build Provenance