Open Source Report: Software Bill of Materials (SBOM)
In this video, find out why more and more organizations are now generating a Software Bill of Materials (SBOM) and which industries are leading in terms of SBOMs.
This video is from the webinar, “The 2023 State of Open Source Report: Key Findings and Analysis” that took place on February 16, 2023. It features Javier Perez (Chief OSS Evangelist and Senior Director of Product Management, Perforce Software) and Stefano Maffulli (Executive Director, Open Source Initiative) discussing the most interesting findings from this year’s State of Open Source report — and what the results tell us about the future of open source software.
Watch the complete webinar here: https://ter.li/t86nq2
Download the 2023 State of Open Source Report here: https://ter.li/kelibg
- -
Transcript (lightly edited for clarity):
Javier Perez: Something that has been in the news, with all the security initiatives and software supply chain issues, is regulations and some of the recommendations from different governments about generating a Software Bill of Materials, or an SBOM. And so we wanted to ask about SBOMs, if organizations are generating SBOMs or not. On the screen is a quick high level example of an SBOM. There are two predominant formats for SBOMs: the Cyclone DX and the SPDX. This gives you an idea of the content of a Software Bill of Materials. The report found that over 25% of organizations are generating SBOMs. I think that's not enough, of course, but that's also encouraging. And then you can see by industry, the number for government and public sector organizations is higher – and close to 50% of our respondents came from the U.S. So you can see that it’s having an impact, the mandates that some highly regulated industries are getting to generate SBOMs. In industries like banking and financial services, we see more than 25% are generating SBOMs.
Stefano Maffulli: Yeah. It will be interesting to see next year what that overall percentage looks like and especially in sectors like government and banking. My bet is that it will go towards 50%. Because there's gonna be so much — I'm expecting 2023 to be full of new regulations and more conversation around the mandatory use of SBOMs.
Javier Perez: Yeah. And SBOMs includes licenses, right? And information about disclosed vulnerabilities. And that's very important.
- -
About the 2023 State of Open Source Report:
The 2023 State of Open Source Report is a collaboration between OpenLogic by Perforce and the Open Source Initiative (OSI). The report details open source software usage, adoption, and challenges based on anonymous survey responses from open source users across all eight global regions, working in 20+ industries, for organizations of all sizes. Each page is packed with the latest data on the top open source technologies and trends — all accompanied by expert insights and analysis.