“Even though security is important for all organizations, the stakes are higher for the DoD. What we need is a repeatable development process. It’s imperative that we have a standardizedway of building secure software across our military agencies.”

"When I first started, I was manually searching GitHub repos for references to vulnerable libraries but it was impossible to tell whether the codebase was a test repo, staging or not even in use. Anchore's SBOM inventory gave us certainty that a vulnerability was actually in production and needed to …