CI/CD Pipeline Hardening
1. Introduction to CI/CD Hardening
3 docs tagged with "supply-chain"
View all tagsSBOM & Supply Chain Security
1. Introduction
SBOM & VEX Workflows
A Software Bill of Materials (SBOM) records the software components in a product or release. A Vulnerability Exploitability eXchange (VEX) record explains whether a known vulnerability in one of those components affects the product.