FYI:
https://www.linkedin.com/posts/richard-dick-brooks-8078241_iti-and-bsa-lette r-opposing-sbom-and-nist-activity-6976931523883065344-0J8-/?utm_source=share <https://www.linkedin.com/posts/richard-dick-brooks-8078241_iti-and-bsa-lett er-opposing-sbom-and-nist-activity-6976931523883065344-0J8-/?utm_source=shar e&utm_medium=member_desktop> &utm_medium=member_desktop Good to know the SCITT use case for SBOM that we've been discussing aligns more closely with NIST and White House views, and OMB directives, on software supply chain practices: https://www.linkedin.com/posts/richard-dick-brooks-8078241_omb-memo-outlinin g-secure-software-supply-ugcPost-6976939817175523328-DtfI?utm_source=share <https://www.linkedin.com/posts/richard-dick-brooks-8078241_omb-memo-outlini ng-secure-software-supply-ugcPost-6976939817175523328-DtfI?utm_source=share& utm_medium=member_desktop> &utm_medium=member_desktop Link to the SCITT SBOM Use Case and presentation are here: https://hackmd.io/QuqKhy_bQ1qG9yyyBuEABg?view Thanks, Dick Brooks Active Member of the CISA Critical Manufacturing Sector, Sector Coordinating Council - A Public-Private Partnership <https://reliableenergyanalytics.com/products> Never trust software, always verify and report! T <http://www.reliableenergyanalytics.com/> http://www.reliableenergyanalytics.com Email: <mailto:[email protected]> [email protected] Tel: +1 978-696-1788 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#4782): https://lists.spdx.org/g/Spdx-tech/message/4782 Mute This Topic: https://lists.spdx.org/mt/93746719/21656 Group Owner: [email protected] Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
