Software Bills of Materials Impractical, Critics Say

Advocates of greater supply chain scrutiny support the Biden administration's recommendation that federal agencies obtain software bills of materials from their vendors, but the plan is meeting resistance from the tech industry. The Log4j vulnerability is commonly cited by supporters who believe a software bill of materials could enable users to more quickly identify and secure vulnerable software on their networks.