The System Package Data Exchange (SPDX) specification in Markdown and HTML formats.
A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling, books, articles and a plethora of learning resources from the web.
The model for the information captured in SPDX version 3 standard.
Secure Supply Chain Consumption Framework (S2C2F) OSCAL Catalog and tool
Ecma TC54 Website
This repository will be renamed once an ECMA identifier is assigned to the standard.
This repository will be renamed once an ECMA identifier is assigned to the standard.
Add a description, image, and links to the software-transparency topic page so that developers can more easily learn about it.
To associate your repository with the software-transparency topic, visit your repo's landing page and select "manage topics."