Automating creation of Software Bills of Materials
summary
Shows a proof-of-concept tool that generates SPDX 2.2 Software Bills of Materials during CMake builds by using CMake’s file-based APIs to extract build inputs and produce SPDX documents. Demonstrates how the generated SBoMs record relationships between source files and build artifacts, and presents results and next steps from applying this approach to Zephyr (an open-source RTOS using CMake).
AI-written summary · about
related talks
32mNext Steps for Software Bill of Materials (SBOM) Generation in Zephyr
42mPractical SBOM Management with Zephyr and SPDX
42mPractical SBOM Management with Zephyr and SPDX
28mGenerating SBOMs for IoT at Build Time
41mThe State of SBoMs in Embedded
31mSoftware Bill of Materials (SBoM) for dummies
39mSecure Your Supply Chain: Adding a Software Bill of Materials to Your Containers to Improve...
47mSoftware Bill of Materials - Contents List for Software