CISA-facilitated community group offers guidance on SBOM sharing use cases

The Cybersecurity and Infrastructure Security Agency is providing details on current practices for sharing Software Bill of Materials information, as part of a community-led working group’s efforts to promote the adoption of transparency best practices.

The group is providing “examples of how software bill of materials (SBOM) can be shared between different actors across the software supply chain,” according to the white paper published on May 3.

The white paper comes from a CISA-facilitated community working group focused on...