In October 2023, the Cybersecurity and Infrastructure Security Agency (CISA) published a white paper Software Identification Ecosystem Option Analysis. Following the release of that paper, the Department of Homeland Security (DHS), CISA's parent organization, initiated a request for comment (RFC), which closed last week.
Article Link: OpenSSF responds to CISA, advocates for a multifaceted approach to software identification