Episode 312 - The Legend of the SBOM

<p dir="auto"><a href="https://twitter.com/joshbressers" rel= "nofollow">Josh</a> and <a href= "https://twitter.com/kurtseifried" rel= "nofollow">Kurt</a> talk about SBOMs. Not what they are, there's plenty about that. We talk about why everyone keeps claiming they're super important, and why we're starting to see some people question if we really need them. SBOMs are part of a future that's still being invented.</p> <h2 dir="auto">Show Notes</h2> <ul dir="auto"> <li><a href= "https://www.csoonline.com/article/3649794/drop-the-sbom.html" rel= "nofollow">Questioning SBOMs</a></li> <li><a href= "https://www.rezilion.com/blog/log4j-blindspots-what-your-scanner-is-still-missing/" rel="nofollow">Rezilion Log4j diagram</a></li> <li><a href= "https://opensourcesecurity.io/2016/11/22/episode-14-david-a-wheeler-cii-badges/" rel="nofollow">David A Wheeler on CII Badges</a></li> <li><a href= "https://www.flickr.com/photos/daviderickson/718933691/" rel= "nofollow">Using open source is communism</a></li> </ul>