SBOM
Software bill of materials, a complete list of every component a piece of software depends on.
Learn it through a story
- The Pipeline That Shipped the Bug Anyway (Cybersecurity for Juniors 3, Ch 8)
Related terms
- Rules of engagement The agreed scope and boundaries for an authorised security test.
- Safe harbour A promise not to pursue legal action against researchers who stay within an agreed, published testing scope.
- SAST Static application security testing, scanning source code itself for risky patterns.
- SCA Software composition analysis, checking third-party dependencies against known vulnerability databases.
- Scareware A scam that claims your device is infected, to frighten you into clicking.
- Secret scanning Automated tools that watch public code for exposed credentials.