OSS management use cases for software supply chain security

Revenera Software Pulse

The software supply chain is at the forefront of security discussions in companies and governments across the world. Join our expert team as they walk you through four key open source software (OSS) management use cases that enable you to confidently identify security vulnerabilities in open-source and third-party components within your code, as well as manage OSS license compliance and build a Software Bill of Materials (SBOM).

If you are new to SBOMs or are looking to take your process to the next level of maturity, this is the podcast for you!

In this session we provide an industry update and an overview of four practical OSS management use cases with best practices for how to accomplish the following:

• A local developer compliance check in the IDE before code check-in
• Security flow for assessing and annotating security vulnerabilities associated with your SBOM parts and generating a VEX with your analysis data
• Construction of an SBOM in SPDX, CycloneDX, and human readable formats
• Preparation of third-party notices to comply with OSS license attribution requirements

You can register to view the webinar with slides here - https://info.revenera.com/SCA-WBNR-OSS-Management-UseCases