TNS
VOXPOP
How has the recent turmoil within the OpenAI offices changed your plans to use GPT in a business process or product in 2024?
Increased uncertainty means we are more likely to evaluate alternative AI chatbots and LLMs.
0%
No change in plans, though we will keep an eye on the situation.
0%
With Sam Altman back in charge, we are more likely to go all-in with GPT and LLMs.
0%
What recent turmoil?
0%
Open Source

A Software Bill of Materials Could Be Required for Applications Soon

The U.S. government is considering issuing an executive order that would require vendors to provide a software bill of materials (SBOMs).
Apr 15th, 2021 9:39am by
Featued image for: A Software Bill of Materials Could Be Required for Applications Soon
Feature image via Pixabay.

Almost half of those surveyed last year by Synopsys believes media coverage has previously caused their organization to place more stringent controls on the use of open source. That was before the SolarWinds attack, so we already expected to see increased adoption. Now, the trend towards software composition analysis (SCA) may be about to accelerate.

The U.S. government is considering issuing an executive order that would require vendors to provide a software bill of materials (SBOMs). This would effectively boost existing industry-specific and cross-industry efforts to standardize the ways we track software dependencies and other metadata. SPDX, SWID and CycloneDX are the most common standards in use so far.

SCA tools often create their own SBOM after scanning the components in an application. That is important but more relevant is what can be done with this inventory. Right now, most organizations have to update old versions manually or mitigate security issues on a case-by-case basis. The future of the market is not being able to create lists but instead being able to automate actions based on those lists.

Source: Synopsys “DevSecOps Practices and Open Source Management“. Note that the report’s sample was heavily tilted towards East Asian respondents from smaller-sized organizations.

Group Created with Sketch.
THE NEW STACK UPDATE A newsletter digest of the week’s most important stories & analyses.