THE LINUX FOUNDATION PROJECTS

podence

CISA Considering New Set of Minimum Elements

CISA has requested comment on a new set of minimum elements for SBOMs (on top of the original NTiA set). This short announcement describes the process: https://www.cisa.gov/news-events/alerts/2025/08/22/cisa-requests-public-comment-updated-guidance-software-bill-materials The SPDX Tech...

A Guide to the GitHub SPDX Repo

We just published a readme file at the top level of the repository that provides a great overview of the contents and where to find what. https://github.com/spdx