OWASP looks to future-proof SBOMs with CycloneDX 1.6

OWASP released CycloneDX v1.6, adding CycloneDX Attestations (CDXA) to automate machine-readable compliance evidence, a Cryptographic Bill of Materials (CBOM) to inventory and manage cryptographic assets for quantum readiness, and environmental metadata to increase transparency around AI/ML energy use and emissions. Industry experts note these enhancements improve automation, cryptographic governance, and risk-based decision-making across the software supply chain.