---
title: Blog posts tagged "software supply chain"
description: Canonical makes open source secure, reliable and easy to use, providing
  support for Ubuntu and a portfolio of enterprise-grade technologies. Founded in
  2004, Canonical operates globally with team members in over 80 countries.
url: https://canonical.com/blog/tag/software-supply-chain?format=md
---

# Blog posts tagged "software supply chain"

#### [Building an open source chain of trust: new research uncovers key blockers and ways forward](https://canonical.com/blog/open-source-security-research)

Canonical is pleased to share its latest research report, “The open source chain of trust.” Based on a survey of 500 DevOps professionals, the report highlights how organizations approach their open source software supply chains. While many companies are moving toward verifiable provenance and automated security workflows, internal misali

---

Canonical announcements

#### [70% of IT teams spend more than 6 hours per week on security patching – new IDC research](https://canonical.com/blog/70-of-it-teams-spend-more-than-6-hours-per-week-on-security-patching-new-idc-research)

Open source software is a popular tool for businesses for many reasons, but this adoption has introduced new challenges in maintaining their open source software supply chain. 57% of organizations source their packages from upstream open source repositories, and 51% from ecosystem packages like pip or npm. The research shows that while 9

---

Canonical announcements

#### [What is SBOM? Software bill of materials explained](https://canonical.com/blog/what-is-sbom-software-bill-of-materials-explained)

An SBOM boils down to a detailed and accessible list of all the components that make up your software and where they come from. n this article, we’ll examine what an SBOM is, what information it must include, and the approaches that developers and manufacturers alike should be considering as they start building their SBOM.

---

Compliance