-
-
Notifications
You must be signed in to change notification settings - Fork 79
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge remote-tracking branch 'origin/master'
- Loading branch information
Showing
34 changed files
with
939 additions
and
99 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,32 @@ | ||
| external: | ||
| - title: A software bill of materials helps secure your supply chain | ||
| subtitle: The software supply chain involves developing, maintaining and distributing software to end users. To enhance the functionality of the software being developed, developers frequently depend... | ||
| organization: SecurityIntelligence | ||
| date: 2023-06-28 | ||
| image: /theme/assets/images/news/supply_chain.png | ||
| url: https://securityintelligence.com/posts/a-software-bill-of-materials-helps-secure-your-supply-chain/ | ||
| - title: The five dimensions of SBOM quality | ||
| subtitle: In a memo issued on June 9, the Office of Management and Budget clarified details about how agencies will be required to collect cybersecurity attestations from software providers whose services they use. | ||
| organization: Contrast Security | ||
| date: 2023-07-26 | ||
| image: /theme/assets/images/news/cloud_sec.png | ||
| url: https://www.contrastsecurity.com/security-influencers/sbom-quality-cyclonedx-and-the-5-dimensions-of-sbom-quality-contrast-security | ||
| - title: "CycloneDX 1.5: The next big step for SBOMs and software transparency" | ||
| subtitle: With CycloneDX 1.5, OWASP is introducing a number of new types of SBOMs. Here's a full run-down on changes — and what they mean for software transparency. | ||
| organization: ReversingLabs | ||
| date: 2023-07-12 | ||
| image: /theme/assets/images/news/transparency.png | ||
| url: https://www.reversinglabs.com/blog/owasp-takes-cyclonedx-beyond-the-sbom | ||
| - title: Introducing Software Bill of Materials for Confluent Platform | ||
| subtitle: The software supply chain in the technology industry is becoming increasingly complex. This complexity poses significant challenges in terms of compliance, security, and vulnerability management. | ||
| organization: Confluent | ||
| date: 2023-07-28 | ||
| image: /theme/assets/images/news/confluent.png | ||
| url: https://www.confluent.io/blog/software-bill-of-materials/ | ||
| internal: | ||
| - title: How CycloneDX v1.5 Increases Trust and Transparency in More Industries | ||
| subtitle: OWASP is often the first to reveal new, innovative ways to leverage SBOM. The release of CycloneDX version 1.5 is no different, opening up SBOM adoption to new industries and introducing numerous ways to customize CycloneDX SBOMs to indicate quality, show transparency, and expedite vulnerability remediation while increasing trust in the supply chain. | ||
| organization: OWASP Foundation | ||
| date: 2023-06-23 | ||
| type: Blog | ||
| externalLink: https://owasp.org/blog/2023/06/23/CycloneDX-v1.5 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,34 +1,28 @@ | ||
| --- | ||
| # Page settings | ||
| layout: extension | ||
| layout: newsroom | ||
| keywords: application security, software security, software bill of material, SBOM, BOM, open source, supply chain, specification, spdx, license, package url, purl, cpe | ||
| comments: false | ||
| banner: false | ||
|
|
||
| # Hero section | ||
| title: News | ||
| title: CycloneDX Newsroom | ||
| window_title: OWASP CycloneDX News | ||
| description: News and updates from the OWASP SBOM community | ||
| description: Get the latest CycloneDX developments from OWASP and InfoSec publications. Discover how leaders in tech have used CycloneDX in new and innovative ways. | ||
|
|
||
| # Micro navigation | ||
| micro_nav: true | ||
|
|
||
| # Page navigation | ||
| breadcrumbs: | ||
| - title: CYCLONEDX | ||
| - title: ABOUT | ||
| - title: NEWSROOM | ||
|
|
||
| --- | ||
|
|
||
| # News | ||
| # Featured quote | ||
| quote: | ||
| author: Jeff Williams | ||
| org: Co-founder and CTO of Contrast Security | ||
| text: <b>"CycloneDX is making software transparency a reality</b>. I’m very excited about all the new capabilities in CycloneDX v1.5, particularly the ability to capture detailed evidence proving the SBOM is correct, such as methods, techniques, and call stacks.<br><br>SBOMs aren’t just lists of ingredients anymore. CycloneDX supports services, machine learning, low code, vulnerability disclosure, formulation, and annotations to really <b>capture what’s important about the software you depend on.</b>" | ||
|
|
||
| <p>Subscribe with <a href="{{ site.baseurl }}/feed.xml">RSS</a> to keep up with the latest from the OWASP SBOM community.</p> | ||
|
|
||
| <div class="articles"> | ||
| {% for article in site.posts limit:100 %} | ||
| <div class="article-item"> | ||
| <div class="title"><a href="{{ site.url }}{{ article.url }}">{{ article.title }}</a></div> | ||
| <div class="subtitle">{{ article.subtitle }}</div> | ||
| <div class="overview"><span class="date">{{ article.date | date: "%d %B %Y" }}</span>{% if article.location %} – {{ article.location }} {% endif %} – | ||
| {{ article.excerpt | xml_escape }} | ||
| </div> | ||
| </div> | ||
| {% endfor %} | ||
| </div> | ||
| --- |
Oops, something went wrong.