A Standardized Approach to SBOM - Dan McKinney - ASW #173

<p>In this segment, Mike and Dan McKinney from Cloudsmith will be discussing SBOM and what that looks like for your applications. Other topics include: cloud-native tooling for your software supply chain, the history of provenance, GPG Keys & signing commits, package consumption, understanding threat modeling, and knowing the roles and responsibilities when it comes to security of your assets.</p> <p> </p> <p>This segment is sponsored by Cloudsmith. Visit <a href= "https://securityweekly.com/cloudsmith">https://securityweekly.com/cloudsmith</a> to learn more about them!</p> <p> </p> <p>Visit <a href= "https://www.securityweekly.com/asw">https://www.securityweekly.com/asw</a> for all the latest episodes!</p> <p>Show Notes: <a href= "https://securityweekly.com/asw173">https://securityweekly.com/asw173</a></p>