Unverified60% confidenceFactExact time
There are currently two mainstream format standards for SBOM: SPDX, led by the Linux Foundation, and CycloneDX, promoted by OWASP.
2
Sources
60%
Confidence
Long-term
Relevance
7/11/2026
First Seen
Sources
Decoding the Government Software Security Executive Order: New Supply Chain Compliance and SBOM Requirements
hackernewshackernews7/9/2026
Related Claims
UnverifiedSPDX 由 Linux 基金会维护，已被 ISO/IEC 5962:2021 采纳；CycloneDX 由 OWASP 维护68% similarUnverifiedBSDun is an open-source project whose goal is to add native support for FreeBSD ELF binaries to the Linux kernel, allowing FreeBSD programs to run on the Linux kernel without recompilation.59% similarUnverifiedBSP（板级支持包）是嵌入式开发中连接硬件与操作系统的关键层，包含bootloader、内核移植、设备树配置等核心组件56% similarUnverifiedSDL is a cross-platform multimedia development library that, since its first release in 1998, abstracts the underlying differences between operating systems such as Windows, Linux, and macOS.56% similarUnverifiedOpenTOFU is a community fork hosted by the Linux Foundation, created in 2023 after HashiCorp changed Terraform's license from MPL to BSL.56% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/476625API
curl https://kongchang.com/api/v1/knowledge/claims/476625MCP
get_claim(id=476625)