Just to be really sure: invoke implies executables and not code
fragments, yes? If you mean executables that would be the SAM scope of
SWID then, I think.
Why do you think that this has not been explored? I was under the
impression that this is currently being covered in the SBOM WGs out there.
On 18.08.20 15:55, Eliot Lear wrote:
"code being placed in service"
Does that refer to a software creation process or a packaging process, or both?
(or... something entirely different that I did not get)
Neither. The code may be on the box already, but at all not invoked.
Regards,
Eliot
_______________________________________________
OPSAWG mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/opsawg
