CycloneDX 1.5: The next big step for SBOMs and software transparency

CycloneDX is one of the most popular standards for describing the components of an application, including source code, binaries, libraries, and containers. With the latest release of the specification, version 1.5, OWASP, the manager of the project, is expanding it even further to encompass hardware, operations, manufacturing, and artificial intelligence.

While saying that the concept of the software bill of materials (SBOM) is solid, Mike Parkin, a senior technical engineer at Vulcan Cyber, noted that the real challenge for SBOMs …

application artificial big code components containers cyclonedx hardware latest manager manufacturing operations owasp popular project release sboms software source code standards transparency version version 1