spdx

The other day we were talking about the CRA and SBOMs. It’s quite clear that the manufacturer needs an SBOM, but what type of SBOM do they mean? CISA has defined many types of SBOMs and it wasn’t clear to us what they referred to. Another question is if the Read more…