From making investments in software bills of materials (SBOMs) to tracking open source software usage and dependencies to more actively contributing to open source software projects, the level of attention being paid to open source security has never been greater as the September 2023 deadline for federal compliance looms.