Mastodon Feed
Boosted by andrewnez ("Andrew Nesbitt"):
michelin@hachyderm.io ("Michel Lind :fedora: :debian:") wrote:
@andrewnez @gvwilson @fedora is planning to use
https://fedoraproject.org/wiki/Changes/Adopt%5FPURL%5FMetadata
which is at the very least SBOM adjacent.
We find that otherwise each packaging ecosyatem has its own way of specifying dependencies, and this makes it harder for security teams to flag issues accurately