CISA publishes SBOM guidance for assembling sets of software components

The Cybersecurity and Infrastructure Security Agency has released community-led guidance on generating a Software Bill of Materials for an integrated set of software products.

“Software producers, such as product manufacturers and integrators, often need to assemble and test a set of products together before delivering to their customers. This set of products may contain components that undergo version changes over time and need to be tracked,” the new guidance says.

The guidance says, “This document is a guide for...