CycloneDX SBOM Spec (OWASP)

OWASP CycloneDX is a modern standard for the software supply chain. Software Bill of Materials (SBOM), SaaSBOM, Cryptography (CBOM), AI/ML-BOM, VDR/VEX...

[CycloneDX SBOM Spec (OWASP) @CycloneDX_Spec]

Join us on Wed May 28, 2025 in Barcelona for a hands-on hackathon to test Beta 1 of the Transparency Exchange API (TEA) — a new way to securely exchange SBOMs, attestations & more.

Free registration, thanks to @OWASP & @EcmaIntl

https://t.co/kRL2NFVFx6

#CycloneDX #SBOM

[CycloneDX SBOM Spec (OWASP) @CycloneDX_Spec]

Today, we're launching CycloneDX Assessors Studio (alpha). Built for maturity tracking, compliance audits, and supply chain vendor trust. Turn compliance checklists into verifiable attestations.

#CycloneDX #OWASP #Compliance #GRC #OpenSource

https://t.co/Xhdc0K17Z1

[CycloneDX SBOM Spec (OWASP) @CycloneDX_Spec]

The Authoritative Guide to AI/ML-BOM from CycloneDX just dropped. Full transparency into your ML supply chain: security, compliance, data lineage, reproducibility. AI regulations are here. Be ready.

#AI #AIBOM #SBOM #OWASP #CycloneDX

https://t.co/Q3ESdPA0GF

[Daniel Cuthbert @dcuthbert]

Project Sunshine, by the @CycloneDX_Spec team is just amazing. Proper visualisations, with EPSS and CISA KEV enrichments, of your SBOM

https://t.co/XGYV3fDKyQ

[CycloneDX SBOM Spec (OWASP) @CycloneDX_Spec]

CycloneDX v1.7 is here!

The latest release strengthens software & system transparency with:
- Cryptography BOM (CBOM)
- Data provenance & citations
- Intellectual property visibility

Learn more: https://t.co/VjHCDgC5tL

#OWASP #CycloneDX #SBOM #CBOM #CyberSecurity

[Anchore @anchore]

📊 "Content is king" - Steve Springett on #SBOMlearningWeek Day 4. Learn how CycloneDX is enabling machine-readable attestations and five dimensions for evaluating SBOM completeness. https://t.co/8CKUgeCNKu (Miss day #3? It's here https://t.co/2vS3xKeT1a) #DevSecOps

[SafeDep @safedepio]

🚀vet v1.10 is here...with CycloneDX SBOM support!

Generate detailed SBOMs with:
📦 Package metadata (PURLs, licenses)
🛡️ Vulnerabilities & malware info

Run:
vet scan --report-cdx sbomfile.cdx.json
Try vet: https://t.co/7TBhBhQnuk

#CycloneDX #SBOM #SupplyChainSecurity

[Dependency-Track @DependencyTrack]

Join our community meeting next Wednesday, 2nd April at 4-5PM UTC for a presentation from our friends at #Monzo Bank!

Learn how they replaced a proprietary vulnerability scanner with #CycloneDX
#SBOMs & DT.

Calendar: https://t.co/AsZdyT8tzA
Zoom: https://t.co/JQwRiKaUTs

[Sam Stepanyan @securestep9]

The next #OWASP Dependency Track Community Meeting (virtual) on April 2nd is going to be interesting:
Learn how leading UK neobank Monzo replaced a proprietary vulnerability scanner with open-source OWASP #CycloneDX and Dependency Track:

[CycloneDX SBOM Spec (OWASP) @CycloneDX_Spec]

Join the DT community meeting next Wednesday, 2nd April at 4-5PM UTC for a presentation from our friends at @monzo Bank! Learn how they replaced a proprietary vulnerability scanner with #CycloneDX #SBOMs & DT.
Calendar: https://t.co/t7r6C0l8yk
Zoom: https://t.co/7RpJ3BT2fa

[Anchore @anchore]

🚨 New Webinar 🚨 The need for verifiable trust in #software components is critical. Learn to build on #SBOMs w/ CycloneDX attestation plus how to create cryptographically verifiable evidence of #security practices, #automate manual audit workflows & more. https://t.co/SzagmHoL2u

[conan.io @conan_io]

What’s Your C/C++ Code Made Of? The Importance of the Software Bill of Materials

Learn about SBOMs for C/C++ projects, and how Conan can generate CycloneDX @CycloneDX_Spec SBOMs of your dependencies, store them inside your package metadata and more:

https://t.co/ERBdE4041w

[CycloneDX SBOM Spec (OWASP) @CycloneDX_Spec]

"Seat-belt approach" for #SBOMs! 💺 cdxgen >= v11.1.7's new "secure mode" uses Node.js permissions to control resource access. Safely analyze even untrusted code by limiting file access, process execution, & more. This fixes CVE-2024-50611.

https://t.co/EEpgR3nrsK

[Pavel Shukhman @taleodor]

Why We Chose CycloneDX Over SPDX #SBOM #CyberSecurity - https://t.co/kEIELengBV

[CycloneDX SBOM Spec (OWASP) @CycloneDX_Spec]

Level up your Ruby SBOMs with cdxgen v11.1.0 - now featuring #evinse for enhanced security and insights. Chat with #cdxgenGPT to learn more

https://t.co/jeVchtijdq

[Izar Tarandach @izar_t]

We even have a very nice, very small, very interested working group around...Threat Modeling BOM. Come join us. There's plenty of work to be done, and you get to help build some potentially very cool stuff. https://t.co/XfelZaYeMy
2/2

[Izar Tarandach @izar_t]

Do you, like me, scratch your head and think "SBOMs, what are they good for?" ? If you do, why not join one of the working groups on CycloneDX - now even easier to do by checking out the new site at https://t.co/K9gJagUMz0 !
1/2

[OWASP® Foundation @owasp]

OWASP Members change the world. Your membership helps shape the organization and drives our projects and community. If you are not a member or are due for renewal within 60 days, please join or renew today and get 10-25% off!

https://t.co/87vap2mFAl > Memberships > Apply

[Dan Guido @dguido]

it-depends, the most comprehensive SBOM builder from @trailofbits, now has CycloneDX support
https://t.co/F606aya70g

[Tech At Bloomberg @TechAtBloomberg]

We're proud to host the 128th Meeting of the Ecma General Assembly at @Bloomberg's Global HQ, starting today in NYC! We welcome the attending Ecma members & wish them a productive week discussing the future of Ecma's standards, including #ECMAScript & #CycloneDX!

#opensource