Firmware SBOMs for open source projects

You might be surprised to hear that closed source firmware typically contains open source dependencies. In the case of EDK II (probably the BIOS of your x64 machine you re using now) it s about 20 different projects, and in the case of coreboot (hopefully the firmware of the machine you ll own in the future) it s about Continue reading Firmware SBOMs for open source projects