Sveriges mest populära poddar
Open Source Security
Teknologi

Episode 410 - Package identifiers are really hard

32 min•8 januari 2024

Josh and Kurt talk about package identifiers. We break this down in the context of an OpenSSF response to a CISA paper on software identifications. The identifiers that get all the air time are purl, CPE, SWID, and OmniBOR. This is a surprisingly complex problem space. It feels easy, but it's not.

Show Notes

Fler avsnitt av Open Source Security

Visa alla avsnitt av Open Source Security
AIBOM, CBOM, and HBOM with Allan Friedman
•35 min
Packagist and Composer security with Jordi Boggiano
•35 min
Sustaining Open VSX with Mike and Thabang
•37 min
Hacking your CI/CD with François Proulx
•36 min
Open source verification with Sal Kimmich
•32 min
Vulnerability disclosure with Casey Ellis
•38 min
F-Droid the open app store with Hans
•37 min
Open source is critical infrastructure with Kat Cosgrove
•38 min
How to actually test a disaster plan with David Bernstein
•35 min
Open Source Pledge with Vlad-Stefan Harbuz
•35 min

Open Source Security med Josh Bressers finns tillgänglig på flera plattformar. Informationen på denna sida kommer från offentliga podd-flöden.