Generating SBOM for your code using OSS Review Toolkit
summary
Shows how to use OSS Review Toolkit (ORT) together with GitLab CI/CD to automate license and security compliance checks and produce SPDX software bill-of-materials (SBOMs). Includes a live demonstration of ORT features and how to combine them with GitLab workflows plus internal and community crowdsourcing to handle large scan outputs and incomplete or incorrect FOSS package metadata.
AI-written summary · about
related talks
28mGenerating a SPDX SBOM for Your Code in CI Using ORT
33mORT Automate compliance using Open Source & InnerSource
43mUsing SBOMs for Linux Foundation Projects
30mORT: Automate your open source policy using Open Source & Inner Source
01h 26mPractical Software Bill of Materials: From Generation to Distribution Workshop
33mAutomation of SBOM Assessment in AGL Development Process
39mSBOM Automation - Making Compliance Effortless by Consuming, Enrichin...
22mBuilding a Robust SBOM Solution with Backstage.io