Discover and read the best of Twitter Threads about #SBOM
Most recents (3)
This month's (July 22) updates from @AquaSecTeam Open Source Team - features, content, news and more 🧵
(P.S We're also making future updates available via a newsletter, details at the end of the thread)
(P.S We're also making future updates available via a newsletter, details at the end of the thread)
You already know Trivy could always generate #SBOM, but now it can also *scan SBOM* 😯 This means it doesn't need to analyze the container for every scan, just once when generating an SBOM, and then just match it with vulnerabilities database. aquasecurity.github.io/trivy/v0.30.4/… 
Support for new platforms: Amazon Linux 2022, pnpm, improved .NET Core, and more..
aquasecurity.github.io/trivy/v0.30.4/…
aquasecurity.github.io/trivy/v0.30.4/…
This month's (June 22) updates from @AquaSecTeam Open Source Team - features, content, news and more 🧵
@AquaSecTeam One of the biggest news this past month was that Trivy now scans #kubernetes ⎈ clusters - through the CLI or a native Kubernetes Operator!
A quick NYE thread to acknowledge all the progress we've made on #SBOM and bringing transparency and better resilience to the software #supplychain this year, and all the folks who made it happen. 1/11
ntia.gov/SBOM
ntia.gov/SBOM
We made great progress in 2019 towards making #SBOM a reality. @NTIAgov published the first set of community-drafted documents to offer guidance around the practice of SW transparency, and we charted the course for our next steps in 2020 2/11 ntia.doc.gov/blog/2019/stak…
@NTIAgov None of this would be possible without incredible work from the community! There are too many stakeholders who helped draft docs, join calls, debate, and remind others how their corner of the ecosystem actual works to name in a thread, but I want to acknowledge a few 3/11
