DevOps Articles

Combining SBOMs With Security Data: Chainguard’s OpenVEX

Software Bills of Materials tell you what code is in a program. Chainguard’s OpenVEX will tell you what’s wrong and what’s not quite right, but OK in your code.

You can do this by representing VEX data inside an existing SBOM, or within a dedicated VEX SBOM.

The end result is that OpenVEX has simplified the remediation process for software vulnerability management.

Eventually, the combination of SBOM and VEX will lead to building programs faster and more securely than ever.