Uploaded April 2026 | Updated September 2026, 2 weeks ago
Viktor Peterson, part of the CISA task force working on SBOM blueprints and co-founder of sbomify, explores the shifting landscape of software supply chain security as the EU's Cyber Resilience Act (CRA) comes into force, a "GDPR moment" for the industry. Beyond mere compliance, Peterson argues that SBOMs provide significant operational value as tools for automated security audits and license management, provided they are generated using ecosystem-specific tools rather than generic scanners. He also points to providing critical security insights into the risks of weaponised code, citing recent incidents where security tools themselves became attack vectors, and emphasises the need for vendor-neutral discovery mechanisms like the Transparency Exchange API (TEA) to secure the software lifecycle.
Read a transcript of this interview: bit.ly/41eFG34
Subscribe to the Software Architects’ Newsletter for your monthly guide to the essential news and experience from industry peers on emerging patterns and technologies:
infoq.com/software-architects-newsletter
Upcoming Events:
QCon AI Boston 2026 (June 1-2, 2026)
Learn how real teams are accelerating the entire software lifecycle with AI.
boston.qcon.ai
QCon San Francisco 2026 (November 16-20, 2026)
qconsf.com
The InfoQ Podcasts:
Weekly inspiration to drive innovation and build great teams from senior software leaders. Listen to all our podcasts and read interview transcripts:
- The InfoQ Podcast infoq.com/podcasts
- Engineering Culture Podcast by InfoQ infoq.com/podcasts/#engineering_culture
- Generally AI: infoq.com/generally-ai-podcast
Follow InfoQ:
- Mastodon: https://techhub.social/@infoq
- X: https://x.com/InfoQ?from=@
- LinkedIn: linkedin.com/company/infoq
- Facebook: facebook.com/InfoQdotcom#
- Instagram: instagram.com/infoqdotcom/?hl=en
- Youtube: youtube.com/infoq
- Bluesky: https://bsky.app/profile/infoq.com
Write for InfoQ: Learn and share the changes and innovations in professional software development.
- Join a community of experts.
- Increase your visibility.
- Grow your career.
infoq.com/write-for-infoq
Viktor Peterson, part of the CISA task force working on SBOM blueprints and co-founder of sbomify, explores the shifting landscape of software supply chain security as the EU's Cyber Resilience Act (CRA) comes into force, a "GDPR moment" for the industry. Beyond mere compliance, Peterson argues that SBOMs provide significant operational value as tools for automated security audits and license management, provided they are generated using ecosystem-specific tools rather than generic scanners. He also points to providing critical security insights into the risks of weaponised code, citing recent incidents where security tools themselves became attack vectors, and emphasises the need for vendor-neutral discovery mechanisms like the Transparency Exchange API (TEA) to secure the software lifecycle.
Read a transcript of this interview: bit.ly/41eFG34
Subscribe to the Software Architects’ Newsletter for your monthly guide to the essential news and experience from industry peers on emerging patterns and technologies:
infoq.com/software-architects-newsletter
Upcoming Events:
QCon AI Boston 2026 (June 1-2, 2026)
Learn how real teams are accelerating the entire software lifecycle with AI.
boston.qcon.ai
QCon San Francisco 2026 (November 16-20, 2026)
qconsf.com
The InfoQ Podcasts:
Weekly inspiration to drive innovation and build great teams from senior software leaders. Listen to all our podcasts and read interview transcripts:
- The InfoQ Podcast infoq.com/podcasts
- Engineering Culture Podcast by InfoQ infoq.com/podcasts/#engineering_culture
- Generally AI: infoq.com/generally-ai-podcast
Follow InfoQ:
- Mastodon: https://techhub.social/@infoq
- X: https://x.com/InfoQ?from=@
- LinkedIn: linkedin.com/company/infoq
- Facebook: facebook.com/InfoQdotcom#
- Instagram: instagram.com/infoqdotcom/?hl=en
- Youtube: youtube.com/infoq
- Bluesky: https://bsky.app/profile/infoq.com
Write for InfoQ: Learn and share the changes and innovations in professional software development.
- Join a community of experts.
- Increase your visibility.
- Grow your career.
infoq.com/write-for-infoq
