iiinova — where your digital self keeps evolving

CycloneDX Bill of Materials Specification (ECMA-424) @cyclonedx.bsky.social · 14/04/2026

Today, we're launching CycloneDX Assessors Studio (currently in alpha). Built for maturity tracking, compliance audits, and supply chain vendor trust. Turn compliance checklists into verifiable attestations. #CycloneDX #OWASP #Compliance #GRC #OpenSource assessors.studio

assessors.studio

CycloneDX Assessors Studio

Operationalize CycloneDX Attestations. Perform structured assessments, gather verifiable evidence, and issue machine-readable attestations.

020

CycloneDX Bill of Materials Specification (ECMA-424) @cyclonedx.bsky.social · 03/03/2026

The Authoritative Guide to AI/ML-BOM from CycloneDX just dropped. Full transparency into your AI supply chain: security, compliance, data lineage, reproducibility. AI regulations are here. Be ready. #AI #AIBOM #SBOM #OWASP #CycloneDX cyclonedx.org/guides/

cyclonedx.org

Guides and Resources | CycloneDX

Unlock valuable insights and practical guidance to help your organization maximize CycloneDX and reduce supply chain risk.

021

Reposted by CycloneDX Bill of Materials Specification (ECMA-424)

Anchore @anchore.com · 03/12/2025

"The format doesn't really matter... It's really about the content." We hosted @stevespringett.bsky.social, Chair of the CycloneDX WG, to discuss why the industry needs to stop fighting format wars and st... anchore.com/blog/4-lessons-on-futur…

022

CycloneDX Bill of Materials Specification (ECMA-424) @cyclonedx.bsky.social · 21/04/2025

Join us on Wed May 28, 2025 in Barcelona for a hands-on hackathon to test Beta 1 of the Transparency Exchange API (TEA) — a new way to securely exchange SBOMs, attestations & more. Free registration, thanks to @owasp.org and Ecma International. cyclonedx.org/events/hacka... #CycloneDX #SBOM

cyclonedx.org

Transparency Exchange API (TEA) Hackathon - Barcelona 2025 | CycloneDX

Join us in Barcelona to test and shape the Transparency Exchange API, the next evolution in secure supply chain communication.

085

Reposted by CycloneDX Bill of Materials Specification (ECMA-424)

Steve Springett @stevespringett.bsky.social · 15/02/2025

Honored to be discussing @cyclonedx.bsky.social and machine-readable attestations with Anchore this month. Join me! This is going to be fun and educational for anyone not familiar with CycloneDX Attestations (CDXA). This is an ideal solution for EO 14144 which requires machine-readable attestations.

061

Reposted by CycloneDX Bill of Materials Specification (ECMA-424)

Steve Springett @stevespringett.bsky.social · 10/02/2025

The continued innovation happening in @cyclonedx.bsky.social is truly inspiring. This week, its from the cdxgen team with "cdx1", a family of open-source, SOTA machine learning (ML) models purpose-built for xBOM analysis, validation, and reasoning. www.linkedin.com/pulse/cdx1-u... #OWASP #SBOM

linkedin.com

cdx1 - Unlocking the Next Frontier in xBOM Analysis

If asked to name an incubator that has produced hundreds of projects and tens of highly valuable unicorns, one need only mention the OWASP Foundation. While many in the Western world erroneously assum...

142

Reposted by CycloneDX Bill of Materials Specification (ECMA-424)

Uncle Joe @sydseter.com · 19/01/2025

From @cyclonedx.bsky.social Level up your Ruby SBOMs with cdxgen v11.1.0 - now featuring #evinse for enhanced security and insights. Chat with #cdxgenGPT to learn more. chatgpt.com/g/g-673bfeb4...

chatgpt.com

ChatGPT - CycloneDX Generator (cdxgen)

I'm a CycloneDX and xBOM expert.

071

Reposted by CycloneDX Bill of Materials Specification (ECMA-424)

Uncle Joe @sydseter.com · 17/01/2025

From Jeff Williams at @cyclonedx.bsky.social "The new Cybersecurity EO requires machine readable secure software development attestations. Good thing the OWASP CycloneDX project already created the CDXA standard to capture attestations." Check it out: cyclonedx.org/capabilities...

0154

Reposted by CycloneDX Bill of Materials Specification (ECMA-424)

Uncle Joe @sydseter.com · 10/12/2024

At the first ever KoalaCon @owasp.org shared insights into how TEA (Transparency Exchange API) can help automate your product lifecycle. This will be essential to dependency management and vulnerability management in the future. And you can be part of it! #cybersec #appsec #dependency-management

0155

Reposted by CycloneDX Bill of Materials Specification (ECMA-424)

Steve Springett @stevespringett.bsky.social · 02/12/2024

KoalaCon 2024 was a huge success. Thank you to all the speakers, including Olle E Johansson, Anthony Harrison, Niklas Düster, Viktor Petersson, and Piotr P. Karwasz. Couldn't attend. No worries, the recording is available on YouTube. youtu.be/NStzYW4WnEE?... #OWASP #SBOM #SoftwareTransparency

youtu.be

OWASP KoalaCon 2024

YouTube video by OWASP CycloneDX

0107