Since 41% of organizations are still not confident about their open-source software security, more innovations are needed to change this narrative.Even though software bill of materials offer more visibility, the Open Source Security Foundation seeks to alter SBOMs from just being a mechanism to be organism-based so that they address issues such as changes in metadata and compiler flags, according to Omkhar Arasaratnam (pictured, left), general manager of OpenSSF at The Linux Foundation.“If we look back to the SANS Top 20 — or I guess this is now known the CIS Top 20 — number one has been asset management for the last three decades,” Arasaratnam said