The SBOM Way! The Art of Consuming, Enriching, and Managing Inbound..
summary
Build delivers a new SW360 package portlet plus a CycloneDX importer and pipeline that sends binary/package data into a clearing flow with FOSSology integration and a license compatibility agent. The demo imports ~1300 packages / 382 missing VCS and shows automatic reuse and grouping of releases so 31 package clearing requests can collapse into one source-level request. Automations run end-to-end but review remains mostly manual and the UI import can be slow, import ultimately succeeds.
AI-written summary · about
chapters (8)
- 0:00SBOM workflow intro
- 3:30SW360 core features
- 10:20Compliance with Fossology
- 13:36Process SBOMs in SW360
- 16:44Package portlet for SBOMs
- 23:30Demo SBOM import & enrichment
- 31:07Reduce dev compliance workload
- 32:19Q&A on licenses & automation
related talks
42mThe SBOM Way! The Art of Consuming, Enriching, and Managing Inbound..
39mSBOM Automation - Making Compliance Effortless by Consuming, Enrichin...
43mSBOM Management with SW360: Cross-Industry Perspectives and Best Practices
26mLeveraging SBOMS to Automate Packaging, Transfer, and Reporting of D...
38mEnhancing SBOM Generation: Filling the Gaps To Make Actionable SBO...
22mBuilding a Robust SBOM Solution with Backstage.io
35mTransforming SBOMs from Compliance Burden to Security Asset
47mThe Missing Link - How we collect and leverage SBOMs