[DL.SCM.10] Generate a comprehensive software inventory for each build
Category: RECOMMENDED
Maintain a comprehensive inventory of the components and dependencies that make up your software assists with identifying vulnerabilities and managing risks. This inventory, often taking the form of a Software Bill of Materials (SBOM), provides valuable insights into the composition of your software.
Generate a comprehensive inventory as part of each build. This forms a continuous record of your software's composition, enabling quick and efficient identification and management of potential vulnerabilities or risks. Tracking inventory that is machine readable enhances visibility and aids in identifying vulnerabilities and risks, enhancing the security posture of your software at scale.
Use a tool to create and manage SBOMs, centralizing them with other build artifacts
for easier accessibility. Open-source tool sets provided by Open Worldwide Application
Security Project (OWASP
Related information:
