As always, we focused on the question of “how do we use SBOMs in production, large-scale and complex supply chains?” We are dealing with the reality of supply chains with many participants who have different levels of skill, use different formats, and perhaps follow different regulations or policies.
This meeting looked at two important pieces of analysis from the OpenChain Japan SBOM Sub-Group. The goal was to find common challenges, and how we can address them when we consider:
- Process management as our focus (the management layer)
- Previous OpenChain work in this field (e.g. the Telco SBOM Guide)
- Other work around the world (e.g. emerging regulation etc.)
Background Analysis #1 – SBOM Quality Considerations:
Background Analysis #2 – Further SBOM Quality Considerations:
Watch the Meeting:
Learn More About This Study Group:
Our SBOM Study Group brings all our various SBOM-related activities together and helps answer the question of “how do we use SBOMs in production, large-scale and complex supply chains?” Our original kick-off call has all the details.
Get Involved:
✉️ We have a dedicated mailing list:
https://lists.openchainproject.org/g/sbom
💻 We have a dedicated GitHub Repo:
https://github.com/OpenChain-Project/SBOM-sg
