Versions Compared

Old Version 5

changes.mady.by.user Unknown User (mjc)

Saved on

compared with

New Version 6

changes.mady.by.user Unknown User (mjc)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • SBOMs needs to be automatically generated for builds at build time
  • SBOMs need to be signed with the same keys used for releases, in the same way (detached signature, detached hash)
  • SBOMs are expected to be static to the given release, must never be changed after release
  • SBOMs need to be useful (i.e. can be parsed, machine readable by current/future tools)

...