SPDX

@SPDXTeam

An open standard for communicating software bill of material (SBOM) information, including components, licenses, copyrights, and security references.

spdx.dev

spdx.github.io/spdx-spec/

Replies Reposts Media

SPDX
@SPDXTeam
Jun 15, 2023
Excellent summary of what the team got up to during the SPDX Minisummit last month!
SPDX SBOM
@SPDX_SBOM
Jun 15, 2023
Unpacking the SPDX 3.0 Tooling Mini Summit: A New Era of Compliance and Security spdx.dev/unpacking-the-…
SPDX
@SPDXTeam
Mar 29, 2023
🎉Excited to see that an SPDX SBOM can now be generated by a push of an export button! Thanks for making things easier for all the open source developers on @github! Awesome work @jhutchings0
Justin Hutchings
@jhutchings0
Mar 28, 2023
Need an SBOM and not sure where to start? Now you can get an SBOM with the push of a button. github.blog/2023-03-28-int…
2
SPDX
@SPDXTeam
Jun 15, 2022
#SPDX community is interested to hear your feedback on which usage scenarios we should focus on for SPDX 3.0. Please help us by completing this short survey by June 28.
docs.google.com
SPDX Defects Community Survey
The SPDX Defects working group has assembled a preliminary list of usage scenarios that account for various situations where an individual/entity might need to represent or interact with vulnerabil...
SPDX
@SPDXTeam
Jun 15, 2022
Thanks for writing this up @lumjjb and @halbecaf!! The #SPDX community needs more well written and clear examples like this. Well done.
Brandon Lum
@lumjjb
Jun 14, 2022
A practical example of using SBOMs to check for vulnerabilities with the Kubernetes SPDX docs and osv.dev... Together with @halbecaf and tooling from Gary O'Neall! @SPDXTeam @sbom_x security.googleblog.com/2022/06/sbom-i…
SPDX
@SPDXTeam
Feb 17, 2022
Curious to learn more about SPDX? Join @_kate_stewart at @openchainproj Security Summit today for the latest updates.
OpenChain Project
@openchainproj
Feb 16, 2022
Reminder: OpenChain Security Summit on 18th February (17th for PST Time). This will be a killer chance to see how open source and security are being addressed this year. OpenSSF, SPDX + Log4J Case Study: openchainproject.org/featured/2022/… #SpreadTheWord