DevelopersTV

How SBOMs and Engineering Discipline Can Help You Avoid Trivy’s Compromise

InfoQ — Apr 13, 2026 — talk

Why watch

Viktor Peterson explains how the EU Cyber Resilience Act creates a 'GDPR moment' for software supply chain security, and how properly generated SBOMs enable automated security audits and license management. The interview covers the risks of weaponized security tools like the Trivy compromise, and introduces the Transparency Exchange API as a vendor-neutral mechanism for securing the software lifecycle.