Open Source Security
Episode 410 - Package identifiers are really hard
32 min•8 januari 2024
Om avsnittet
Josh and Kurt talk about package identifiers. We break this down in the context of an OpenSSF response to a CISA paper on software identifications. The identifiers that get all the air time are purl, CPE, SWID, and OmniBOR. This is a surprisingly complex problem space. It feels easy, but it's not.
Show NotesFler avsnitt
Visa alla avsnitt av Open Source SecurityOpen Source Security med Josh Bressers finns tillgänglig på flera plattformar. Informationen på denna sida kommer från offentliga podd-flöden.