SBOM & documentation
The software bill of materials required by Annex I, Part II, the technical documentation that sits behind it, and what has to reach the user.
No questions here yet
Be the first to ask. Someone else is almost certainly stuck on the same thing.
From the web
Recent developments on SBOM & documentation from elsewhere, with a note on why they matter.
Your enterprise doesn’t need six BOM programs. It needs one evidence graph (opens CSO Online)
CSO Online ·
CRA compliance drives continuous security testing (opens qa-financial)
qa-financial ·
OpenSSF Shares Expanded Membership and New Global Policy Resources During Community Day Europe (opens OpenSSF)
OpenSSF ·
Meeting the CRA's 2026 Reporting Requirements (opens FOSSA)
FOSSA ·