You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When one embeds a link to the CycloneDX website in twitter, Slack, MS Teams (etc) then the link preview states:
OWASP CycloneDX is a lightweight software bill of materials (SBOM) standard designed for use in application security contexts and supply chain component analysis
I believe that this should be updated. CycloneDX is more than just SBOM... and the text sort of sells CycloneDX short. There has been more than one occasion when I have sent a link and then had to follow-up with extra info to explain. Also, if space allows, mention NTIA or similar?
Also, the use of the word lightweight has definitely been used against CycloneDX by those who would say "Use X rather than CycloneDX because CycloneDX is lightweight".
The text was updated successfully, but these errors were encountered:
When one embeds a link to the CycloneDX website in twitter, Slack, MS Teams (etc) then the link preview states:
I believe that this should be updated. CycloneDX is more than just SBOM... and the text sort of sells CycloneDX short. There has been more than one occasion when I have sent a link and then had to follow-up with extra info to explain. Also, if space allows, mention NTIA or similar?
Also, the use of the word lightweight has definitely been used against CycloneDX by those who would say "Use X rather than CycloneDX because CycloneDX is lightweight".
The text was updated successfully, but these errors were encountered: