SBOM

In the first blog post of this SBOM series, Driving Software Supply Chain Security: Practical Support for Open Source Projects in SBOM Implementation , we introduced our initiative and outlined how we are offering hands-on implementation support to early adopters projects. The second blog post, Project-Led SBOM Implementation: Our Journey...

The Eclipse Foundation Security Team’s vision for the “Implementing Software Bills of Materials (SBOMs) for projects” initiative is that all Eclipse Foundation projects automatically generate SBOMs for new releases and upload them to a centralized, publicly accessible registry. Building on this vision, SBOMs are generated during the build process and...

At the start of the year, the Eclipse Foundation Security Team launched a new initiative aimed to enhance software supply chain security: “Implementing Software Bills of Materials (SBOMs) for projects” . SBOMs are detailed inventories of a project’s components and dependencies, widely recognized as essential for supply chain security. They...