Software Bill Of Materials

A software bill of materials (SBOM) is a structured inventory of all components, libraries, and dependencies that make up a software application, including their versions and licensing information. For AI governance, SBOMs are critical for understanding the composition of AI models and systems, enabling organizations to identify potential security vulnerabilities, license compliance risks, and supply chain threats. In regulated industries, maintaining detailed SBOMs helps enterprises demonstrate due diligence in model provenance, track open-source usage, and respond quickly to disclosed vulnerabilities affecting their AI infrastructure.

1 item

Corporate PolicyEU2026-07-23

Codeberg Bans LLM Training on Member Data and Blocks AI-Generated Projects, Raising Open-Source Supply-Chain Governance Questions

Codeberg e.V., the EU-based nonprofit hosting the Forgejo-powered Codeberg forge, passed two member-voted resolutions at its 2025 annual assembly: a permanent prohibition on using project or user data to train large language models or other generative AI tools, and a terms-of-use change banning so-called 'vibe-coded' projects that consume disproportionate platform resources. The policies apply immediately to all hosted repositories and users. Enterprise teams that source open-source components from Codeberg or allow developers to contribute code there must update their supply-chain risk assessments and acceptable-use policies accordingly.

Codeberg open-source supply chain training data policy acceptable use data governance EU vibe coding software bill of materials