https://foojayio.github.io/website/today/author/dan-conn/Articles written by Dan Conn on foojay.io - Friends of OpenJDKHugoen-usTue, 07 Mar 2023 09:15:56 +0000https://foojayio.github.io/website/today/making-sboms-threats-and-modelling-them-a-piece-of-cake/Tue, 07 Mar 2023 09:15:56 +0000https://foojayio.github.io/website/today/making-sboms-threats-and-modelling-them-a-piece-of-cake/<p>The third in a series of SBOMs, software supply chains, the government and you (you too, no exceptions).</p> <p>Yes, just like the previous articles, we have cake this time too - this one is a three tiered extravaganza!</p> <figure class="aligncenter size-thumbnail"> <img fetchpriority="high" decoding="async" width="300" height="260" src="Unknown-300x260.jpg" alt="" class="wp-image-62771"> </figure> <p>So&hellip; still with us? Good!</p> <p>Earlier, Steve Poole showed us his digital mixing bowl, <a href="https://foojayio.github.io/website/today/sboms-first-steps-in-a-new-journey-for-developers/">telling us how applications and their dependencies were like ingredients to a fancy cake</a> .</p> <p>Jamie Coleman then made sure there were no soggy bottoms (one for the Mary Berry fans), by explaining how <a href="https://foojayio.github.io/website/today/sboms-and-software-composition-analysis/">SCA tools and SBOMs can work together to prevent vulnerabilities</a> .</p>