SBOM Management with SW360: Cross-Industry Perspectives and Best Practices
summary
SW360 is a central software‑component manager that now ingests CycloneDX or SPDX SBOMs via a CycloneDX SBOM importer (drag‑and‑drop or REST/CI pipeline with token auth), auto‑creates projects and packages, and models binary packages separately from source components using a new package portlet so 67 NuGet packages map to 11 source repos and cut license‑clearing work. Siemens runs ~12,000 projects, 36,000 components and 100,000+ releases with ~9,000 users; features include an SBOM enricher, license DB plans, security integration and exportable SBOMs.
AI-written summary · about
chapters (6)
- 0:00Introduction to SW360
- 1:21SW360 overview
- 6:00Toshiba user experience
- 8:43Siemens use cases
- 20:47Advanced SBom and package usage
- 35:57Q&A and community
related talks
42mThe SBOM Way! The Art of Consuming, Enriching, and Managing Inbound..
39mSBOM Automation - Making Compliance Effortless by Consuming, Enrichin...- 42mThe SBOM Way! The Art of Consuming, Enriching, and Managing Inbound..
57mSBOMs in the Real World: Practical Guidance for Managing Three Common SBOM Scenarios
47mThe Missing Link - How we collect and leverage SBOMs
38mEnhancing SBOM Generation: Filling the Gaps To Make Actionable SBO...
22mBuilding a Robust SBOM Solution with Backstage.io
57mSBOMs – The Missing Link