Damus
Security Writer :donor: · 71w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqql3j2atrzrjdefdhu6g0v85g3lm204ygmel625n723yl354ps68s0unejy a commercial SBoM wouldn’t, but an engineering one definitely would.
Ingo Steuwer profile picture
@nprofile1q... @nprofile1q...
I was asking myself the same question.... do you have a link with a specification how a "network destination" BoM looks like?
Couldn't find anything in the specification https://ecma-international.org/wp-content/uploads/ECMA-424_1st_edition_june_2024.pdf

Currently we (as software vendor) provide information about networking needs in a documentation, the SBoM contains "only" information about the included software, licenses etc..
1
Security Writer :donor: · 71w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpq3whtzm3urt5tqtju80hhs3rdfc4pd3gwk73hryglk60ve7aupecqfqkdkv nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqql3j2atrzrjdefdhu6g0v85g3lm204ygmel625n723yl354ps68s0unejy it’s right there in the definition. I suppose there’s room for inter...