6 misconceptions about Software Bills of Materials

There is no debate that the software supply chain is filled with action. It’s the front lines of the security world these days. If you have a shadow of a doubt, search the history of SolarWinds, Codecov, or CircleCI for examples of how attackers use the supply chain as a gateway of compromise.

The software supply chain is so hot that it’s caught the attention of the US Federal Government by way of the now infamous Executive Order …

action attackers attention bills caught circleci codecov compromise federal federal government gateway government history hot misconceptions search security security world shadow software software supply chain solarwinds supply supply chain world