OWASP CycloneDX is a modern standard for the software supply chain. Software Bill of Materials (SBOM), SaaSBOM, Cryptography (CBOM), AI/ML-BOM, VDR/VEX...
Join us on Wed May 28, 2025 in Barcelona for a hands-on hackathon to test Beta 1 of the Transparency Exchange API (TEA) — a new way to securely exchange SBOMs, attestations & more.
Free registration, thanks to @OWASP & @EcmaIntl
https://t.co/kRL2NFVFx6
#CycloneDX#SBOM
The Authoritative Guide to AI/ML-BOM from CycloneDX just dropped. Full transparency into your ML supply chain: security, compliance, data lineage, reproducibility. AI regulations are here. Be ready.
#AI#AIBOM#SBOM#OWASP#CycloneDX
https://t.co/Q3ESdPA0GF
Project Sunshine, by the @CycloneDX_Spec team is just amazing. Proper visualisations, with EPSS and CISA KEV enrichments, of your SBOM
https://t.co/XGYV3fDKyQ
CycloneDX v1.7 is here!
The latest release strengthens software & system transparency with:
- Cryptography BOM (CBOM)
- Data provenance & citations
- Intellectual property visibility
Learn more: https://t.co/VjHCDgC5tL
#OWASP#CycloneDX#SBOM#CBOM#CyberSecurity
📊 "Content is king" - Steve Springett on #SBOMlearningWeek Day 4. Learn how CycloneDX is enabling machine-readable attestations and five dimensions for evaluating SBOM completeness. https://t.co/8CKUgeCNKu (Miss day #3? It's here https://t.co/2vS3xKeT1a) #DevSecOps
Join our community meeting next Wednesday, 2nd April at 4-5PM UTC for a presentation from our friends at #Monzo Bank!
Learn how they replaced a proprietary vulnerability scanner with #CycloneDX#SBOMs & DT.
Calendar: https://t.co/AsZdyT8tzA
Zoom: https://t.co/JQwRiKaUTs
The next #OWASP Dependency Track Community Meeting (virtual) on April 2nd is going to be interesting:
Learn how leading UK neobank Monzo replaced a proprietary vulnerability scanner with open-source OWASP #CycloneDX and Dependency Track:
Join the DT community meeting next Wednesday, 2nd April at 4-5PM UTC for a presentation from our friends at @monzo Bank! Learn how they replaced a proprietary vulnerability scanner with #CycloneDX#SBOMs & DT.
Calendar: https://t.co/t7r6C0l8yk
Zoom: https://t.co/7RpJ3BT2fa
🚨 New Webinar 🚨 The need for verifiable trust in #software components is critical. Learn to build on #SBOMs w/ CycloneDX attestation plus how to create cryptographically verifiable evidence of #security practices, #automate manual audit workflows & more. https://t.co/SzagmHoL2u
What’s Your C/C++ Code Made Of? The Importance of the Software Bill of Materials
Learn about SBOMs for C/C++ projects, and how Conan can generate CycloneDX @CycloneDX_Spec SBOMs of your dependencies, store them inside your package metadata and more:
https://t.co/ERBdE4041w
"Seat-belt approach" for #SBOMs! 💺 cdxgen >= v11.1.7's new "secure mode" uses Node.js permissions to control resource access. Safely analyze even untrusted code by limiting file access, process execution, & more. This fixes CVE-2024-50611.
https://t.co/EEpgR3nrsK
Level up your Ruby SBOMs with cdxgen v11.1.0 - now featuring #evinse for enhanced security and insights. Chat with #cdxgenGPT to learn more
https://t.co/jeVchtijdq
We even have a very nice, very small, very interested working group around...Threat Modeling BOM. Come join us. There's plenty of work to be done, and you get to help build some potentially very cool stuff. https://t.co/XfelZaYeMy
2/2
Do you, like me, scratch your head and think "SBOMs, what are they good for?" ? If you do, why not join one of the working groups on CycloneDX - now even easier to do by checking out the new site at https://t.co/K9gJagUMz0 !
1/2
OWASP Members change the world. Your membership helps shape the organization and drives our projects and community. If you are not a member or are due for renewal within 60 days, please join or renew today and get 10-25% off!
https://t.co/87vap2mFAl > Memberships > Apply
We're proud to host the 128th Meeting of the Ecma General Assembly at @Bloomberg's Global HQ, starting today in NYC! We welcome the attending Ecma members & wish them a productive week discussing the future of Ecma's standards, including #ECMAScript & #CycloneDX!
#opensource