Overview
Explore the process of generating a Software Package Data Exchange (SPDX) Software Bill of Materials (SBOM) for code in Continuous Integration (CI) environments using the OSS Review Toolkit (ORT) in this informative conference talk. Learn from Thomas Steenbergen of HERE Technologies as he demonstrates how to implement this crucial practice, enhancing software transparency and security in the development pipeline.
Syllabus
Generating a SPDX SBOM for Your Code in CI Using ORT - Thomas Steenbergen, HERE Technologies
Taught by
Linux Foundation