Sign up to save your podcasts
Or
Share Episode 410 - Package identifiers are really hard
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Episode 410 - Package identifiers are really hard
Josh and Kurt talk about package identifiers. We break this down in the context of an OpenSSF response to a CISA paper on software identifications. The identifiers that get all the air time are purl, CPE, SWID, and OmniBOR. This is a surprisingly complex problem space. It feels easy, but it's not.
Show Notes- OpenSSF CISA response
- purl
- CPE
- OmniBOR
- SWID
View all episodes
By Josh Bressers
4.7
4040 ratings
Josh and Kurt talk about package identifiers. We break this down in the context of an OpenSSF response to a CISA paper on software identifications. The identifiers that get all the air time are purl, CPE, SWID, and OmniBOR. This is a surprisingly complex problem space. It feels easy, but it's not.
Show Notes- OpenSSF CISA response
- purl
- CPE
- OmniBOR
- SWID
More shows like Open Source Security
View all
Security Now (Audio)
2,001 Listeners
Risky Business
369 Listeners
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
639 Listeners
The Changelog: Software Development, Open Source
288 Listeners
Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec
370 Listeners
LINUX Unplugged
266 Listeners
Hacked
185 Listeners
CyberWire Daily
1,017 Listeners
Late Night Linux
164 Listeners
Smashing Security
321 Listeners
Darknet Diaries
7,971 Listeners
Hacking Humans
315 Listeners
Defense in Depth
73 Listeners
2.5 Admins
98 Listeners
Risky Bulletin
43 Listeners