Tooling up: Getting SBOMs to Scale
summary
Covers Software Bill of Materials (SBOMs) generation and use across source files, builds, and built components, focusing on tools that create and consume SBOMs at scale. Names open source tooling as a focus area, surveys existing tools and ecosystems, and identifies gaps and opportunities for innovation needed to support large-scale SBOM workflows.
AI-written summary · about
chapters (13)
- 0:00Start
- 5:07Motivation
- 6:55Goal: Supporting an accessible, competitive marketplace
- 11:43What is a Minimum SBOM?
- 13:52Taxonomy for Classifying SBOM Tools
- 15:53Other ways of classifying tools
- 19:07Generation made easy-single line cmds
- 27:08Plumbing
- 29:28Challenge: Vulnerability vs Exploitability
- 35:13Translating Between SBOM Formats and Filetypes
- 36:42Next steps for the tooling ecosystem
- 40:34What can your organization do?
- 42:18What can you do?
related talks
01h 26mPractical Software Bill of Materials: From Generation to Distribution Workshop
38mThe State of SBOMs
38mEnhancing SBOM Generation: Filling the Gaps To Make Actionable SBO...
41mAll About That BoM, ‘bout That BoM
27mSBOM: The Rest Of the Story
47mSoftware Bill of Materials - Contents List for Software
35mSBOMs: Navigating the Evolving Landscape of Software Bill of Materials
38mWhat the &#% Is in That SBOM? How to Provide Users What Software Components Are Included