Software supply chain

Common card · No. 243611

A software supply chain is the components, libraries, tools, and processes used to develop, build, and publish a software artifact. This collection of dependencies is called a software supply chain, by analogy with supply chains of physical goods required for manufacturing. Companies with products that rely on complex software supply chains may implement strategies for supply chain risk management to try to improve supply chain security. A software bill of materials (SBOM) declares the inventory of components used to build a software artifact, including any open source and proprietary software components. It is the software analogue to the traditional manufacturing bill of materials (BOM), which is used as part of supply chain management. SBOMs are a strategy for improving transparency in the software supply chain.

Read on Wikipedia