THE LINUX FOUNDATION PROJECTS

News & Announcements

Jun 14, 2023

Unpacking the SPDX 3.0 Tooling Mini Summit: A New Era of Compliance and Security

The Software Package Data Exchange (SPDX) 3.0 Tooling Mini Summit recently hosted by the Linux Foundation at Open Source Summit North America stands as a significant milestone in the evolution of compliance and security in the realm of software supply chains. The event brought together an array of tooling operators,…

May 16, 2023

SPDX Announces 3.0 Release Candidate with New Use Cases

VANCOUVER, May 8, 2023 – We are delighted to announce the release of the SPDX 3.0 Release Candidate, the first in a series of releases that will lead to the general availability of SPDX 3.0. This is a significant milestone for the SPDX project, and we are thrilled to share some…

Mar 29, 2023

GitHub Creating SBOMs using SPDX

Looks like GitHub has a self service option to create SBOMs for a GitHub Project based on SPDX! See this blog from them.

Jan 30, 2023

Why you should use SPDX for security

Phil Odence, the Chair for SPDX, has written a very informative article on why you should use SPDX for Security and even goes onto to address some of the common Myths around SPDX. It was published on Linux.com. You can read the article here.

Jan 10, 2023

Why you should use SPDX for security

https://docs.google.com/document/d/1Yd7ZKAl1l67FAqGOjLcr6MTr2e2KyhIGsB1NZ6M24Ro/edit#