Free scanning service helps companies build an up-to-date SBOM

As developers increasingly rely on open source components in their projects, knowing which have been used is a key part of being able to identify updates and potential threats. This is where a software bill of materials (SBOM) is essential. Application security testing and software research services company GrammaTech is launching a no cost SBOM service, alongside a new version of its CodeSentry software composition analysis (SCA) tool. Unlike source code tools, CodeSentry analyzes the binary that executes to identify all components or vulnerabilities including those contained in post production applications. This means it can identify second, third and fourth… [Continue Reading]