OpenSSF Adds Attestations to SBOMs to Validate How Software is Built

OpenSSF introduces SBOMit, a tool that enhances Software Bills of Materials (SBOMs) with in-toto attestations, increasing transparency and security in the software development process. SBOMit helps mitigate the risk of errors, enhances security, and enables organizations to recover securely from compromises.