--- title: GUAC Joins OpenSSF as Incubating Project | daily.dev description: GUAC has joined the OpenSSF as an incubating project. It provides a tool to analyze and visualize software bill of materials (SBOM) and determine... canonical: https://daily.dev/posts/guac-joins-openssf-as-incubating-project-25sqsqvra twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: GUAC Joins OpenSSF as Incubating Project | daily.dev og:description: GUAC has joined the OpenSSF as an incubating project. It provides a tool to analyze and visualize software bill of materials (SBOM) and determine... og:url: https://daily.dev/posts/guac-joins-openssf-as-incubating-project-25sqsqvra og:image: https://api.daily.dev/og/posts/25SQSqVrA.png og:image:alt: GUAC Joins OpenSSF as Incubating Project og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # GUAC Joins OpenSSF as Incubating Project **[InfoQ](https://daily.dev/sources/infoq)** · 2 min read · 1 upvotes · 0 comments ## Summary GUAC has joined the OpenSSF as an incubating project. It provides a tool to analyze and visualize software bill of materials (SBOM) and determine vulnerabilities. GUAC supports competing standards for SBOMs and can ingest SLSA attestations. It has applications in establishing connections and compliance, unveiling gaps in the software supply chain, and detecting/responding to threats. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#security](https://daily.dev/tags/security), [#open-source](https://daily.dev/tags/open-source), [#devops](https://daily.dev/tags/devops), [#appsec](https://daily.dev/tags/appsec), [#sbom](https://daily.dev/tags/sbom) [View this post on daily.dev](https://daily.dev/posts/guac-joins-openssf-as-incubating-project-25sqsqvra) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"GUAC Joins OpenSSF as Incubating Project","url":"https://daily.dev/posts/guac-joins-openssf-as-incubating-project-25sqsqvra","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/guac-joins-openssf-as-incubating-project-25sqsqvra"},"datePublished":"2024-03-07T14:01:14.495Z","dateModified":"2024-05-09T08:29:02.242Z","description":"GUAC has joined the OpenSSF as an incubating project. It provides a tool to analyze and visualize software bill of materials (SBOM) and determine...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/93df513573ccc8ad1af7f58aabcbba50?_a=AQAEufR","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/93df513573ccc8ad1af7f58aabcbba50?_a=AQAEufR","isAccessibleForFree":true,"articleSection":"InfoQ","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"InfoQ","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/afc3bced3e1e4b188dd9127017a60e0c","url":"https://daily.dev/sources/infoq"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/guac-joins-openssf-as-incubating-project-25sqsqvra","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,open-source,devops,appsec,sbom","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"InfoQ","item":"https://daily.dev/sources/infoq"},{"@type":"ListItem","position":3,"name":"GUAC Joins OpenSSF as Incubating Project"}]} ```