Skip to content

[Feature] if possible, please, add "publiccode.yml" and "Software Bill of Materials (SBOM)" #11

Description

@ifrh

publiccode.yml implements a European standard.

publiccode.yml is a metadata standard for repositories containing software developed or acquired by public administrations, designed to make them easily discoverable and thus reusable by other entities.

Source and documentation:

A few articles on the topic of publiccode.yml:

Software Bill of Materials (SBOM)

The EU Cyber Resilience Act will come into effect Dec 11, 2027.

"The global adoption of the Software Bill of Materials (SBOM) was decisively accelerated by the U.S. Executive Order 14028 in 2021, which mandated SBOMs for all federal agencies and their software vendors. [...] In parallel, European regulatory momentum is similarly mandating SBOMs for market access, driven by the EU Cyber Resilience Act (CRA). Germany’s BSI TR-03183-2 guideline complements the CRA by providing detailed technical and formal requirements, explicitly aiming to ensure software transparency and supply chain security ahead of the CRA’s full enforcement."
(Quoted from https://openssf.org/blog/2025/10/22/sboms-in-the-era-of-the-cra-toward-a-unified-and-actionable-framework/ )

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    Status
    📄 To do

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions