IBM and OWASP announce projects to help secure the software supply chain

The OWASP Foundation (Open Web Application Security Project) and IBM have today announced IBM’s contribution of two open source projects aimed at increasing trust across open hardware and software supply chains. The two projects are SBOM Utility and License Scanner, which add to CycloneDX, a flagship OWASP project and a leading Bill of Materials (BOM) standard. These promote validation, content analysis and accuracy of software license information included within BOMs. The IBM-developed SBOM Utility and License Scanner and will contribute open source technologies to OWASP to help developers enhance their quality of data on the front end and help validate… [Continue Reading]