Tern and the State of Cloud Native Compliance

" summary

Covers challenges of composition analysis for container and VM images and explains Tern, an open-source tool that generates Software Bill of Materials (SBoMs) by inspecting images. Describes VMware Open Source Technology Center efforts around Cloud Native compliance, including work on an SPDX 3.0 linkage profile, approaches for building containers with intrinsic SBoMs, and new Tern features to support intrinsic compliance for container images.

AI-written summary · about

" related talks

• 24mBack to the Drawing Board: Building Containers with SBoMsNisha Kumar · KubeCon + CloudNativeCon North America 2021
• 38mThe State of SBOMsFrederick Kautz, Dan Lorenc, Nisha Kumar, Allan Friedman · SupplyChainSecurityCon North America 2021
• 20mEmerging Automated License Compliance for ContainersAlexander Mazuruk, Krzysztof Opasiak · Open Source Summit + Embedded Linux Conference + OSPOCon 2021
• 22mThe Irresistible Rise of Cloud Native: What the Future Means for YOUAndrew Martin · KCD Israel 2023
• 25mA Primer on Software Bill of Materials for DevSecOpsSafeer C M · Conf42 DevSecOps 2024
• 41mIdentifying and Mitigating Cloud and Container ThreatsPablo Musa · Open Source Summit Europe 2023
• 46mSCA for Containers: The Good, the Bad, and the TruthPhilippe Ombredanne, Arun Azhakesan · ContainerCon @ Open Source Summit Europe 2024
• 19mFrom Code to Cloud: Embedding SecuritySiri Varma Vegiraju · SREday San Francisco 2024 Q4