Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Topic Leader(s)

Topic Description

Excerpt

We will review real ONAP SBOM, discuss SBOM generation in LFN CI pipeline, progress on onboarding projects as well as lesson learnt.  This topic is also proposed under ONAP.  If not selected for Plenary presentation, it will be presented under ONAP.


Topic Overview

An SBOM is a formal, machine-readable inventory of software components and dependencies, information about those components, and their hierarchical relationships. These inventories should be comprehensive – or should explicitly state where they could not be. There are several benefits of creating and using SBOM include reducing cost, security risk, license risk, and compliance risk. SBOMs helps in improving software development, supply chain management, vulnerability management, asset management, procurement, and high assurance processes.

...