Tools
Your company can do OK by using spreadsheets to track its software supply chain, but they’ll only get you so far. At some point in your SCA experience, you’ll need to upgrade to dedicated tools to help with each step of the process.
Many commercial options exist for each step of the SCA process, but for better or worse the picture here is constantly shifting. The SCA startup landscape was already crowded before 2021, but EO 14028 created a bit of an SCA gold rush. The number of commercial tools offering SCA functionality has exploded. Actually, wait. I shouldn’t use past tense. The number of commercial SCA tools is exploding and is likely to continue doing so for a few years yet, until the inevitable consolidation occurs by way of mergers ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access