Why are SBOMs failing to stop supply chain attacks?

A software bill of materials (SBOM) has the potential to prevent most supply chain attacks. Who created the software (attribution). What the software contains. A standard format is also an ideal tool for sharing this information between CNAPP tools. However, the lack of motivation to properly verify software integrity and the lack of support from developer tools limit the utility of SBOMs. Let’s analyze the role of SBOMs in the software lifecycle, and what is holding back their adoption. Software development goes a bit like this: Someone takes a few libraries and tools, puts them all together with code, and creates a new piece of software. It’s also a chain; someone will take…