Sushi Bytes

FossID
  • 0,0 (0)
  • ТЕХНОЛОГИИ

Sushi Bytes is an unapologetically AI-generated podcast brought to you by Shinobi, FossID’s vigilant Software Composition Analysis ninja. In each bite-sized episode, Shinobi breaks down the evolving world of software supply chain integrity – from open-source license compliance and vulnerability disclosure to SBOM standards, IP risks, and AI-generated code implications. With a surge in regulatory scrutiny and AI adoption, the software stack is becoming harder to manage – and riskier to ignore. Sushi Bytes offers sharp, fast insights for engineering leaders, open-source program managers, and legal professionals navigating the intersection of compliance, code, and code generation.

Выпуски

  1. CRA in Practice: SBOMs, Vulnerabilities, and Real Action Required in 2026

    10 ФЕВР.

    CRA in Practice: SBOMs, Vulnerabilities, and Real Action Required in 2026

    In the first episode of Sushi Bytes Season Two, Shinobi and Gen welcome Gary Armstrong, Senior Director of Customer Success at FossID, for a practical conversation on what the CRA really requires in 2026 and 2027. Based on Gary’s recent whitepaper, Software Supply Chain Integrity and SBOM Obligations under the EU Cyber Resilience Act, this episode cuts through the noise to explain what you need to do now to be ready.

    8 мин.
  2. Due Diligence Déjà Vu: License Compliance in Software M&A

    29.12.2025

    Due Diligence Déjà Vu: License Compliance in Software M&A

    Startups are moving fast – fueled by AI-generated code, experimental “vibe coding,” and a breakneck pace of shipping software. But when those startups become acquisition targets, things can get messy. In this episode, Shinobi goes solo (with Gen temporarily sidelined by a network outage) to unpack how this new wave of coding introduces license risk that traditional SBOMs miss. Learn why SCA-powered software audits are essential for surfacing modified open source fragments, how blind audits protect confidentiality, and why acquirers need more than metadata to see what’s really lurking in a target’s repo.

    4 мин.
  3. CRAzy Requirements: What the Cyber Resilience Act Means for Your SBOM

    02.12.2025

    CRAzy Requirements: What the Cyber Resilience Act Means for Your SBOM

    The EU Cyber Resilience Act (CRA) is reshaping global expectations for software security – and putting Software Bill of Materials (SBOMs) at the center of compliance. In this episode, Shinobi and Gen break down what the CRA requires, how it compares to U.S. regulations, and what engineering and legal teams must do now to stay ahead. Whether you're shipping to Europe or just want to future-proof your software supply chain, this episode will help you understand what a complete, compliant, and consumable SBOM really looks like.

    6 мин.
  4. Developer Velocity vs. Legal Risk: The Latest Software Engineering Tug-of-War

    13.11.2025

    Developer Velocity vs. Legal Risk: The Latest Software Engineering Tug-of-War

    Developer experience and productivity are critical, but so is copyright and license compliance. In this episode of Sushi Bytes, Shinobi and Gen talk about the tug-of-war between productivity-centric engineering teams and risk-averse legal teams. Who will win? Tune in to hear how modern SCA tooling can align speed with safety, automate away this friction, and give both devs and compliance leaders what they need to ship fast without introducing intellectual property and other legal risk.

    5 мин.
  5. Unmasked: What to Look for in Picking the Right SCA Tool

    13.11.2025

    Unmasked: What to Look for in Picking the Right SCA Tool

    Not every Software Composition Analysis (SCA) tool reveals what’s really haunting your code. In this Halloween-themed episode of Sushi Bytes, Shinobi and Gen explore why comparing SCA tools is trickier than it seems—and what engineering and compliance teams should look for under the mask. From snippet detection and modified code to license clarity, SBOM formats, and audit readiness, this episode offers a practical guide to choosing an SCA partner that’s built for the complexity of modern software supply chains. Light on fear, heavy on insight- this one’s a treat.

    6 мин.
  6. Snippet Detection: Small Code, Big Compliance Risk

    13.11.2025

    Snippet Detection: Small Code, Big Compliance Risk

    In this episode of Sushi Bytes, Shinobi and Gen unpack the high-stakes reality of code snippet: when small fragments of open source code make their way into proprietary applications and go undetected by traditional SCA tools. From copy-pasted Stack Overflow answers to AI-generated code functions, these sometimes-small code segments can carry serious licensing obligations. Learn why simplistic dependency analysis tools miss them, how sophisticated snippet detection technology catches them, and what engineering and compliance leaders can do to reduce hidden IP risk… especially in embedded systems, regulated environments, and during M&A.

    5 мин.
  7. AI-Generated Code: The Legal Unknown in Your Repo

    13.11.2025

    AI-Generated Code: The Legal Unknown in Your Repo

    AI-assisted coding is accelerating development, but also creating compliance headaches. In this episode of Sushi Bytes, Shinobi and Gen unpack the legal gray zones around AI-generated code: Who owns it? Is it safe to use? What happens if it’s trained on GPL-licensed data? If your team uses GitHub Copilot, ChatGPT, or Claude, there’s a good chance your codebase already includes AI-generated snippets—with no license, no attribution, and no paper trail. This episode explores how to identify that risk, build smart internal policies, and scan your way back to clarity.

    4 мин.
  8. The Real Risk of License Drift

    13.11.2025

    The Real Risk of License Drift

    In this episode of Sushi Bytes, Shinobi and Gen dive into the hidden risk of license drift – when the open source license declared in metadata files like package.json or README doesn’t match the actual licenses embedded in the source code. It’s a common problem with serious consequences, especially in embedded systems or M&A deals. The duo explores why relying on metadata alone can mislead engineering teams and expose organizations to IP risk, and how SCA tools like FossID catch mismatches through file-level inspection – so you don’t ship surprises with your software.

    4 мин.
  9. VEX Marks the Spot

    12.11.2025

    VEX Marks the Spot

    Not every vulnerability in your SBOM is a real threat. That’s where VEX comes in. In this episode of Sushi Bytes, Shinobi and Gen explore the Vulnerability Exploitability eXchange… what it is, why it matters, and how it helps teams focus on the vulnerabilities that actually matter. From cutting through alert fatigue to avoiding the growing mess of BOM spinoffs, this duo keeps it sharp, practical, and just a little snarky. Want fewer false alarms and more actionable intel? VEX marks the spot.

    5 мин.
  10. What’s in Your SBOM?

    12.11.2025

    What’s in Your SBOM?

    Your software has a supply chain. Your SBOM is supposed to tell you what’s inside. But what makes a Software Bill of Materials truly useful; and why is everyone suddenly asking for one? In this episode of Sushi Bytes, Shinobi unpacks what an SBOM is, why regulatory pressure is turning it from best practice to business-critical and why spinning off “AI-BOMs” and “API-BOMs” just adds noise. Software is software. Let’s keep it simple… and get it right.

    6 мин.
  11. Introducing Sushi Bytes

    12.11.2025

    Introducing Sushi Bytes

    Welcome to Sushi Bytes – FossID’s bite-sized, AI-generated podcast hosted by Shinobi, your sharp-eyed Software Composition Analysis ninja. In this debut episode, Shinobi breaks down what “software supply chain integrity” really means… and why it’s now a board-level concern. From open source license compliance to AI-generated code and SBOMs, we explore the risks hiding in your codebase and the strategic steps to stay ahead. Short. Smart. No fluff. Let’s get slicing.

    4 мин.
  • Выпусков: 11

Об этом подкасте

Sushi Bytes is an unapologetically AI-generated podcast brought to you by Shinobi, FossID’s vigilant Software Composition Analysis ninja. In each bite-sized episode, Shinobi breaks down the evolving world of software supply chain integrity – from open-source license compliance and vulnerability disclosure to SBOM standards, IP risks, and AI-generated code implications. With a surge in regulatory scrutiny and AI adoption, the software stack is becoming harder to manage – and riskier to ignore. Sushi Bytes offers sharp, fast insights for engineering leaders, open-source program managers, and legal professionals navigating the intersection of compliance, code, and code generation.

Информация

  • Автор
    FossID
  • Годы выхода
    2025 - 2026
  • Выпуски
    11
  • Ограничения
    Без ненормативной лексики
  • Авторские права
    © 2026 FossID AB
  • Сайт подкаста
    Sushi Bytes