In 2021, the Log4j vulnerability catalyzed the industry to take action to boost the security of open source components. The development community is leading this movement, but governments are also taking notice and writing legislation to regulate how organizations approach software transparency.

*** This is a Security Bloggers Network syndicated blog from 2024 Sonatype Blog authored by Sonatype. Read the original post at: https://www.sonatype.com/blog/addo-session-the-state-of-sbom-whats-coming-in-standards-and-regulations