TAG Cyber has published a new article in its TAG Cyber Security Quarterly that makes the point that software bill of materials (SBOM) usage is long overdue. The concept of an SBOM is quite simple: It is a listing of the components used in the code base for some piece of software. Despite this straightforward definition, implementation is much more complex. Keeping an accurate record and inventory of these building blocks is tough ‘ especially in the context of Agile DevOps processes which support rapid update, change, and maintenance of software products.
Source: https://www.helpnetsecurity.com/2021/04/20/tag-cyber-sbom/