Your codebase called. It wants full ingredient labels. And it has to be packaged nicely.

New blog: “Understanding SPDX” → the ISO-approved SBOM recipe for cutting license + vuln chaos.

Read: scatool.com/resources/sb...

#SPDX #SBOM #SCATool #Opensoucesoftware

There was a full house at the @openssf.org meetup in Tokyo today. It was a great turnout—we have an amazing community.

#opensoucesoftware #cybersecurity