Sushi Bytes

FossID

Sushi Bytes is an unapologetically AI-generated podcast brought to you by Shinobi, FossID’s vigilant Software Composition Analysis ninja. In each bite-sized episode, Shinobi breaks down the evolving world of software supply chain integrity – from open-source license compliance and vulnerability disclosure to SBOM standards, IP risks, and AI-generated code implications. With a surge in regulatory scrutiny and AI adoption, the software stack is becoming harder to manage – and riskier to ignore. Sushi Bytes offers sharp, fast insights for engineering leaders, open-source program managers, and legal professionals navigating the intersection of compliance, code, and code generation.

  1. Agentic SCA is the Next Evolution in Software Supply Chain Integrity

    16 ABR

    Agentic SCA is the Next Evolution in Software Supply Chain Integrity

    AI didn’t just change how you build software, it broke your process for inspecting it for open source license compliance and security vulnerabilities. In this episode of Sushi Bytes, Shinobi and Gen reconnect with Aaron Branson to unpack FossID’s newly announced Agentic SCA strategy – and why the timing couldn’t be better after our last conversation on SCA in the AI Era. As code generation accelerates and the sheer volume of code explodes, software risk leaders are facing a new reality: more code, more complexity, and less time to react. Aaron breaks down how Agentic SCA shifts the process from passive scanning to active participation – embedding intelligence, automation, and policy enforcement directly into the development workflow. If you’re dealing with AI-generated code, SBOM pressure, or stepping up compliance rigor without slowing developers down – this is the conversation you need right now.

    13 min
  2. Software Composition in the AI Era

    24 MAR

    Software Composition in the AI Era

    AI is changing how software gets written – but what does that mean for open source compliance and software supply chain security? In this episode of Sushi Bytes, Shinobi and Gen explore SCA in the AI era. As development shifts from prompts to autonomous agents, tool-augmented workflows, and spec-driven engineering, traditional software composition analysis workflows need to evolve. They break down the three major shifts in AI-assisted development and explain why SCA tools must become agent-friendly, tool-driven, and embedded directly into modern development pipelines. If AI is writing the code, someone still needs to understand what’s in it.

    7 min
  3. Modern Software Bigger SCA Expectations

    19 MAR

    Modern Software Bigger SCA Expectations

    For years, Software Composition Analysis focused on managing open source consumption and the related legal and security risks – and that was enough. Today, it isn’t. In this episode of Sushi Bytes, Shinobi and Gen sit down with Aaron Branson to unpack why SCA must evolve to meet modern software realities: AI-generated code with unclear provenance, developers contributing back to open source without leaking IP, and regulations like the EU CRA that demand trustworthy, scalable SBOMs. The takeaway? SCA delivers far more ROI when it’s used to manage today’s risks – not yesterday’s assumptions.

    10 min
  4. CRA in Practice: SBOMs, Vulnerabilities, and Real Action Required in 2026

    10 FEB

    CRA in Practice: SBOMs, Vulnerabilities, and Real Action Required in 2026

    In the first episode of Sushi Bytes Season Two, Shinobi and Gen welcome Gary Armstrong, Senior Director of Customer Success at FossID, for a practical conversation on what the CRA really requires in 2026 and 2027. Based on Gary’s recent whitepaper, Software Supply Chain Integrity and SBOM Obligations under the EU Cyber Resilience Act, this episode cuts through the noise to explain what you need to do now to be ready.

    8 min
  5. Due Diligence Déjà Vu: License Compliance in Software M&A

    29/12/2025

    Due Diligence Déjà Vu: License Compliance in Software M&A

    Startups are moving fast – fueled by AI-generated code, experimental “vibe coding,” and a breakneck pace of shipping software. But when those startups become acquisition targets, things can get messy. In this episode, Shinobi goes solo (with Gen temporarily sidelined by a network outage) to unpack how this new wave of coding introduces license risk that traditional SBOMs miss. Learn why SCA-powered software audits are essential for surfacing modified open source fragments, how blind audits protect confidentiality, and why acquirers need more than metadata to see what’s really lurking in a target’s repo.

    4 min
  6. CRAzy Requirements: What the Cyber Resilience Act Means for Your SBOM

    02/12/2025

    CRAzy Requirements: What the Cyber Resilience Act Means for Your SBOM

    The EU Cyber Resilience Act (CRA) is reshaping global expectations for software security – and putting Software Bill of Materials (SBOMs) at the center of compliance. In this episode, Shinobi and Gen break down what the CRA requires, how it compares to U.S. regulations, and what engineering and legal teams must do now to stay ahead. Whether you're shipping to Europe or just want to future-proof your software supply chain, this episode will help you understand what a complete, compliant, and consumable SBOM really looks like.

    6 min
  7. Developer Velocity vs. Legal Risk: The Latest Software Engineering Tug-of-War

    13/11/2025

    Developer Velocity vs. Legal Risk: The Latest Software Engineering Tug-of-War

    Developer experience and productivity are critical, but so is copyright and license compliance. In this episode of Sushi Bytes, Shinobi and Gen talk about the tug-of-war between productivity-centric engineering teams and risk-averse legal teams. Who will win? Tune in to hear how modern SCA tooling can align speed with safety, automate away this friction, and give both devs and compliance leaders what they need to ship fast without introducing intellectual property and other legal risk.

    5 min
  8. Unmasked: What to Look for in Picking the Right SCA Tool

    13/11/2025

    Unmasked: What to Look for in Picking the Right SCA Tool

    Not every Software Composition Analysis (SCA) tool reveals what’s really haunting your code. In this Halloween-themed episode of Sushi Bytes, Shinobi and Gen explore why comparing SCA tools is trickier than it seems—and what engineering and compliance teams should look for under the mask. From snippet detection and modified code to license clarity, SBOM formats, and audit readiness, this episode offers a practical guide to choosing an SCA partner that’s built for the complexity of modern software supply chains. Light on fear, heavy on insight- this one’s a treat.

    6 min
Ver todo (14)

Acerca de

Sushi Bytes is an unapologetically AI-generated podcast brought to you by Shinobi, FossID’s vigilant Software Composition Analysis ninja. In each bite-sized episode, Shinobi breaks down the evolving world of software supply chain integrity – from open-source license compliance and vulnerability disclosure to SBOM standards, IP risks, and AI-generated code implications. With a surge in regulatory scrutiny and AI adoption, the software stack is becoming harder to manage – and riskier to ignore. Sushi Bytes offers sharp, fast insights for engineering leaders, open-source program managers, and legal professionals navigating the intersection of compliance, code, and code generation.

Información

  • Creador
    FossID
  • Años de actividad
    2025 - 2026
  • Episodios
    14
  • Clasificación
    Apto
  • Copyright
    © 2026 FossID AB
  • Mostrar sitio web
    Sushi Bytes