Posts from 28 April 2024

Back to /, 2024, April 2024.

 Note

Has anyone else started getting spam from a Substack they definitely didn't subscribe to? It's for with an email I wouldn't have signed up to, and it's a language I don't know (Spanish)

I've now unsubscribed and marked it as spam - I didn't seem to get a "are you sure you want to sign up", but I did get a "thanks for subscribing" post (in Spanish)

by Jamie Tanna's profile image Jamie Tanna .

 Note

Friends and folks working with #SBOMs - how do you conceptually think about them in terms of ingesting them into tools?

I.e. I like to think of an SBOM having a source repository or component it relates to, but sometimes you don't know that up front, and all you have is the result of a scan, which could be the source repo, a container image, or a built binary.

Considering whether:

  • I try to guess what repo/component it is based on the filename
  • Just store the filename in the database and allow querying with that (and leave repo info optional)
  • Retrieve metadata from the SBOM that known tools use to define this
  • Some 4th option?

Trying to tweak how Dependency Management Data works with SBOMs and trying to find how other folks do it and consider them

by Jamie Tanna's profile image Jamie Tanna . #sboms.

← 27 April 2024 29 April 2024 →

April
  1. 1
  2. 2
  3. 3
  4. 4
  5. 5
  6. 6
  7. 7
  8. 8
  9. 9
  10. 10
  11. 11
  12. 12
  13. 13
  14. 14
  15. 15
  16. 16
  17. 17
  18. 18
  19. 19
  20. 20
  21. 21
  22. 22
  23. 23
  24. 24
  25. 25
  26. 26
  27. 27
  28. 28
  29. 29
  30. 30