Software Bill of Materials (SBOM) — A Practical Guide for 2026
What an SBOM is, why customers ask for one in 2026, the formats (CycloneDX, SPDX), tools (syft, grype, dependency-track), and the practical adoption path.
Supply Chain
Software Supply Chain Security in 2026 — SBOM, SLSA, and Sigstore
How modern supply chain security actually works — SBOMs, SLSA levels, signing with Sigstore/cosign, attestations, and a practical CI pipeline that protects against typosquatting, dependency hijacks, and tampered builds.