Software Part Catalog Management for Successful SBOM Creation

Explore the critical role of Software Part Catalog Management in creating effective Software Bills of Materials (SBOMs) for embedded devices and IoT manufacturers. Learn about the increasing demands for comprehensive SBOMs and the four key steps in managing software parts: defining, identifying, storing, and retrieving core data for thousands of components. Discover an open-source solution, data model, and workflow that enables manufacturers to maintain a software parts catalog for all their devices, facilitating seamless and cost-effective SBOM generation using industry standards like SPDX. Gain insights into how proper catalog management supports license compliance, security assurance, export controls, and safety certification in this informative 36-minute talk by Mark Gisi from Wind River, presented at a Linux Foundation event.