GUAC has joined the OpenSSF as an incubating project. It provides a tool to analyze and visualize software bill of materials (SBOM) and determine vulnerabilities. GUAC supports competing standards for SBOMs and can ingest SLSA attestations. It has applications in establishing connections and compliance, unveiling gaps in the software supply chain, and detecting/responding to threats.
4 Impressions