The distinctive qualities of Software Bill of Materials
summary
Explains how Software Bill of Materials (SBOMs) serve as immutable, verifiable inventories of files and package dependencies to improve supply-chain security. Describes using cryptographic hashes and relationships to link build artifacts back to source (even with static linking), strategies for keeping SBOMs immutable while referencing dynamic vulnerability data, and how SBOMs act as a compatible interchange format across package ecosystems and security tools, plus practical integration into build systems.
AI-written summary · about
related talks
47mSoftware Bill of Materials - Contents List for Software
16mSBOM, the Beginning of Transparency
35mSBOMs: Navigating the Evolving Landscape of Software Bill of Materials
01h 26mPractical Software Bill of Materials: From Generation to Distribution Workshop
39mSecure Your Supply Chain: Adding a Software Bill of Materials to Your Containers to Improve...
38mWhat the &#% Is in That SBOM? How to Provide Users What Software Components Are Included
27mSBOM: The Rest Of the Story
25mA Primer on Software Bill of Materials for DevSecOps