cyclonedx
1 post · all writing
Your SBOM is half an answer: pair CycloneDX with VEX
An SBOM tells customers what you are made of, and hands them every CVE they can match against you. VEX is the other half, and you have mostly written it.
1 post · all writing
An SBOM tells customers what you are made of, and hands them every CVE they can match against you. VEX is the other half, and you have mostly written it.