CycloneDX SBOM Spec (OWASP) @CycloneDX_Spec
OWASP CycloneDX is a modern standard for the software supply chain. Software Bill of Materials (SBOM), SaaSBOM, Cryptography (CBOM), AI/ML-BOM, VDR/VEX... cyclonedx.org Joined June 2017-
Tweets626
-
Followers954
-
Following8
-
Likes511
📊 "Content is king" - Steve Springett on #SBOMlearningWeek Day 4. Learn how CycloneDX is enabling machine-readable attestations and five dimensions for evaluating SBOM completeness. anchore.com/blog/sbom-insi… (Miss day #3? It's here anchore.com/blog/devops-sc…) #DevSecOps
🚀vet v1.10 is here...with CycloneDX SBOM support! Generate detailed SBOMs with: 📦 Package metadata (PURLs, licenses) 🛡️ Vulnerabilities & malware info Run: vet scan --report-cdx sbomfile.cdx.json Try vet: github.com/safedep/vet #CycloneDX #SBOM #SupplyChainSecurity
Join our community meeting next Wednesday, 2nd April at 4-5PM UTC for a presentation from our friends at #Monzo Bank! Learn how they replaced a proprietary vulnerability scanner with #CycloneDX #SBOMs & DT. Calendar: dub.sh/dtcalendar Zoom: dub.sh/dtzoom
The next #OWASP Dependency Track Community Meeting (virtual) on April 2nd is going to be interesting: Learn how leading UK neobank Monzo replaced a proprietary vulnerability scanner with open-source OWASP #CycloneDX and Dependency Track:
The next #OWASP Dependency Track Community Meeting (virtual) on April 2nd is going to be interesting: Learn how leading UK neobank Monzo replaced a proprietary vulnerability scanner with open-source OWASP #CycloneDX and Dependency Track:
Join the DT community meeting next Wednesday, 2nd April at 4-5PM UTC for a presentation from our friends at @monzo Bank! Learn how they replaced a proprietary vulnerability scanner with #CycloneDX #SBOMs & DT. Calendar: dub.sh/dtcalendar Zoom: dub.sh/dtzoom
🚨 New Webinar 🚨 The need for verifiable trust in #software components is critical. Learn to build on #SBOMs w/ CycloneDX attestation plus how to create cryptographically verifiable evidence of #security practices, #automate manual audit workflows & more. get.anchore.com/cyclonedxandsb…
What’s Your C/C++ Code Made Of? The Importance of the Software Bill of Materials Learn about SBOMs for C/C++ projects, and how Conan can generate CycloneDX @CycloneDX_Spec SBOMs of your dependencies, store them inside your package metadata and more: blog.conan.io/2025/02/05/Wha…
"Seat-belt approach" for #SBOMs! 💺 cdxgen >= v11.1.7's new "secure mode" uses Node.js permissions to control resource access. Safely analyze even untrusted code by limiting file access, process execution, & more. This fixes CVE-2024-50611. github.com/CycloneDX/cdxg…
Why We Chose CycloneDX Over SPDX #SBOM #CyberSecurity - worklifenotes.com/2025/01/21/why…
Level up your Ruby SBOMs with cdxgen v11.1.0 - now featuring #evinse for enhanced security and insights. Chat with #cdxgenGPT to learn more chatgpt.com/g/g-673bfeb403…
We even have a very nice, very small, very interested working group around...Threat Modeling BOM. Come join us. There's plenty of work to be done, and you get to help build some potentially very cool stuff. cyclonedx.org/participate/wo… 2/2
Do you, like me, scratch your head and think "SBOMs, what are they good for?" ? If you do, why not join one of the working groups on CycloneDX - now even easier to do by checking out the new site at cyclonedx.org ! 1/2
OWASP Members change the world. Your membership helps shape the organization and drives our projects and community. If you are not a member or are due for renewal within 60 days, please join or renew today and get 10-25% off! owasp.org/membership > Memberships > Apply
it-depends, the most comprehensive SBOM builder from @trailofbits, now has CycloneDX support github.com/trailofbits/it…
We're proud to host the 128th Meeting of the Ecma General Assembly at @Bloomberg's Global HQ, starting today in NYC! We welcome the attending Ecma members & wish them a productive week discussing the future of Ecma's standards, including #ECMAScript & #CycloneDX! #opensource
📣 dist 0.26.0 is out! - 🦀 built-in Rust cross-compilation - 🛡️ cyclonedx SBOMs, cargo-audit, and omniBOR - 🪪 checksum verification in all installers ...and more! check out the release notes here: github.com/axodotdev/carg…
"It's really about transparency." Episode 22 of Nerding Out with Viktor with Steve Springett is available on YouTube and all major listening platforms 🎧 vpetersson.com/podcast/S01E22… #SBOMs #CycloneDX #podcast
While the Koala project is part of #CycloneDX, the work with the API will also support #SPDX BOM files from start. Join us Nov. 25 for a virtual seminar where we tell you more about this API and what it means for you. teaintro.eventbrite.com
🚀 Learn how to generate SBOMs for Java, Python, Go, and Node.js projects using the CycloneDX standard! steps. Secure your software supply chain with simple, actionable steps 🧑💻 medium.com/Podhavenx/unde… #DevSecOps #SBOM #CycloneDX #SCA #SoftwareSecurity
Dan Lorenc @lorenc_dan
11K Followers 2K Following OSS Supply Chain Security. Founder/CEO/Primary Ariba Admin at https://t.co/sGmuUU9JbG Sigstore: https://t.co/dWKlyYu6kv
Dependency-Track @DependencyTrack
1K Followers 29 Following Open Source SBOM Analysis Platform. Reduce Supply Chain Risk. #OWASP #SBOM #SaaSBOM #HBOM #VEX #SoftwareSupplyChain… https://t.co/12EqTyufEE…
developer-guy @developerguyba
5K Followers 2K Following 🚀CNCF Ambassador 23• 🐳 Docker Captain 23•🎖Best Sigstore Evangelist 22 • ㏅CDF Ambassador 23 • 🇹🇷@kcdturkey Organizer •🕴Organizer @cloudnativetr @devopstr
Allan is @allanfriedm... @allanfriedman
7K Followers 2K Following #SBOM Champion. Full service technocrat. Now at @CISAgov, formerly NTIA. Lapsed{engineer, academic, author}. Personal Account.
Engin Diri @_ediri
5K Followers 2K Following Cloud Native Pilgrim | Kubernetes Enthusiast | Serverless Believer | Senior Solutions Architect @PulumiCorp | (he/him) | CK{A,AD} | tweeting my own opinions
Sean Wright @SeanWrightSec
17K Followers 601 Following Head of Application Security focused on all things #AppSec. Occasionally dabble in my own research. Also keen gamer and aspiring photographer.
Simon Bennetts ⚡�... @psiinon
7K Followers 632 Following ZAP (@zaproxy) by @Checkmarx lead, #Mozillian Mastodon: @[email protected]
cje @caseyjohnellis
29K Followers 4K Following troublemaker & troubleshooter | founder @bugcrowd @disclose_io, board advisor, investor | pioneer of #bugbounty as-a-service | opinions CC0 1.0 | #hacktheplanet
Vandana Verma @InfosecVandana
13K Followers 2K Following President @Infosecdiversty @infoseckids, Chair @owasp, RB @Blackhatevents ASIA @devseccon, #DevRel 🥑@snyksec Tweets are my own
Chris "Not So" Short ... @ChrisShort
19K Followers 2K Following Open Source | Head of @CtrlIQ OSPO | Kubernetes Contributor | DevOps | Disabled Veteran | LEGO | Corgis | Detroit | He/Him | Views solely mine
OWASP® Foundation @owasp
213K Followers 532 Following We improve the security of apps with community-led open source projects, 260 local chapters, and tens of thousands of members worldwide. Famous for OWASP Top 10
Ciara Carey @Ciara_Carey_
652 Followers 2K Following Developer working in Developer Relations @Cloudsmith. Interested in the topic of supply chain security and DevOps.
T1nt1n @t1nt1nsn0wy
702 Followers 4K Following Noobie H4CK3R and researcher at @qualys. Prev @pwc. Views are my own :)
Tatave ⚛️☢️�... @gaziom3224
143 Followers 3K Following Mes tweets n'engagent que moi | IFLS | Maker | Le train de tes injures roule sur les rails de mon indifférence.
Naseer Akhtar @NaseerA78733418
124 Followers 3K Following
Buchi Reddy B @buchireddy
1K Followers 2K Following Founder & CEO @LevoIncHQ On a mission to help secure APIs easily. The digital world needs better security. #AppSec #DevSecOps #APIs
Anne Bendix | AppSec ... @AppSecNomad
1 Followers 16 Following Turning Devs into AppSec Leads | Founder of AppSecAdventure
Martin Žídek @martin_zidek_cz
28 Followers 232 Following
Sahil Gupta @sahil_3112
63 Followers 136 Following Building Secure SDLC | AppSec | DevSecOps | Cloud Native Security | Securing Software Supply Chain
Sourav Mishra @SourMish25
5 Followers 190 Following
Davi Busanello @davibusanello
630 Followers 4K Following 💜💛💙 Remote & async 🥑, Software Engineer, headphones destroyer, Quant trader, and amateur runner (opinions are my own). Currently 🌏📡 Previously fintechs
. @opi982
3 Followers 432 Following
quocnht💙💛 @quocnht
48 Followers 1K Following
CodeWisdomPL @CodeWisdomPL
25 Followers 80 Following In learning's embrace, Medium's wisdom, AI's grace, Future paths take shape.
Barreto ✳️ @Renato_Cripto
95 Followers 1K Following Entusiasta em criptomoedas. ''A maioria das pessoas associa dinheiro a prazer imediato. Para mim, ele deve ser acumulado para proporcionar liberdade'' #bitcoin
keem_the_investor @acoladia
209 Followers 982 Following Cloud SME |DigitalhealthSME| investor| ai enthusiast
Lavinia @BauchKeaga40
43 Followers 2K Following
Miranda @CKirlin18365
52 Followers 2K Following
eyes @EyesPog
29 Followers 145 Following
Tyler Welton (spaceB0... @spaceB0xx
1K Followers 615 Following Jesus phreak. ⚡️ Founder @Untamed_Theory 💻 Hacker 🎤 Speaker @ DEFCON, BSides, PhreakNIC 🍏 OWASP CI/CD Top10 contributor
Danil Vilkhovskiy @vilkhovskiy
232 Followers 998 Following CEO Softenq | An experienced full-cycle custom software development team with deep domain expertise. A reliable outsourcer and outstaffer.
Altayeb Salim @Im_Altayeb
8 Followers 549 Following I am working on developing myself. I love teaching others what I know about CS | #CCNA | #MCSA | #eJPTv2 #eWPTv2 #CEH
Thierry Gaillet ⚙�... @ThyGat
4K Followers 3K Following #IoT #AI #5G #XR #edge #quantum • digital transformation, design, innovation, automation & robots • views are mine • @Orange @OrangeBusiness @Orange_Future
OpenSecDevOps @OpenSecDevOps
47 Followers 18 Following #OSDO project, bringing SecDevOps closer with free tools.
Anthony 🎗️🇫�... @aj_webster
46 Followers 675 Following Follows/RTs/Likes don't necessarily imply an endorsement
Tyler Wester @TylerWester2
6 Followers 155 Following
Sven @SvenHoeper
2 Followers 1K Following
Chounosirs @ChounosirsiL5S
122 Followers 3K Following
robbie robbins @robbie_robbins
222 Followers 692 Following Determined sales and business development pro with 20+ years experience in Cyber Security, Info Security, IT GRC, IDAM and Encryption markets.
Sleappea @SleappeaFBWi2n
126 Followers 3K Following
Magic Mike @MagicMike1776
289 Followers 2K Following “well, Doctor, what do we have, a republic or a monarchy?” Franklin replied sagely, “a republic, if you can keep it.”
EMBA Firmware Analyze... @securefirmware
2K Followers 1K Following Open Source Firmware Security Scanner
Pavel Shukhman @taleodor
1K Followers 1K Following 🇨🇦 DevSecOps expert, building ReARM #SBOM repository at @relizaio, https://t.co/SIZ3rXCEgC, TEA Contributor, MCS from UIUC
AppSec Adventure LLC @AppSecAdventure
1 Followers 7 Following
Jens Wiesner (jenswei... @jensweidraussen
305 Followers 1K Following Teamlead @BSI_Bund for Industrial Control and Automation Systems, opinions are my own
Oana Luiza @OanaLuiza_
8 Followers 38 Following
GuoSQ @MMmm39958158
3 Followers 174 Following
Dane McFarlin @DaneMcfarlin
272 Followers 1K Following Founder & tech enthusiast. Life is determined by how one manages stress. #TripleKey #Monecity #CINO
Peter Freiberg @PeterFreiberg
77 Followers 298 Following My passion is Application Security, DevSecOps and CodeAnalytics. @kospex
Dependency-Track @DependencyTrack
1K Followers 29 Following Open Source SBOM Analysis Platform. Reduce Supply Chain Risk. #OWASP #SBOM #SaaSBOM #HBOM #VEX #SoftwareSupplyChain… https://t.co/12EqTyufEE…
OWASP® Foundation @owasp
213K Followers 532 Following We improve the security of apps with community-led open source projects, 260 local chapters, and tens of thousands of members worldwide. Famous for OWASP Top 10
Security Boulevard @securityblvd
7K Followers 2K Following The primary destination for leading cybersecurity news and discourse. Powered by @TechstrongGroup.
Itay Shakury @itaysk
2K Followers 740 Following VP Open Source at @AquaSecTeam | Building @AquaTrivy and @AquaTracee | Advocating as @CNCFAmbassadors
Christopher Hughes @ResilientCyber
435 Followers 144 Following Cloud Security Leader | Cybersecurity Professor | Board Advisor | DevSecOps Advocate
OWASP SCVS Standard @OWASP_SCVS
225 Followers 11 Following Official OWASP Software Component Verification Standard (SCVS) account. Measure and improve software supply chain assurance.
OWASP ASVS Project @OWASP_ASVS
2K Followers 45 Following Official account for the OWASP Application Security Verification Standard (ASVS) project. Contribute on GitHub: https://t.co/QKpX4RG2xCTrends for United States
You might like
