Software Bill of Materials and Supply Chain with the Yocto Project

Explore the intersection of Software Bill of Materials (SBOM) and supply chain security within the context of the Yocto Project in this informative conference talk. Delve into the importance of tracking software components and their origins, understanding potential vulnerabilities, and implementing best practices for maintaining a secure software supply chain. Learn how the Yocto Project's tools and methodologies can be leveraged to generate comprehensive SBOMs, enabling better visibility and control over embedded Linux systems. Gain insights from Joshua Watt of Garmin as he shares practical experiences and strategies for enhancing software transparency and security in embedded development workflows.