15:30
-
16:00
-
16:00
Day 2
Generating SBoMs for BuildStream projects
<p><a href="https://buildstream.apache.org/">BuildStream</a> is a software integration tool that allows building software aggregated from multiple sources in a single pipeline to produce a final output. This final output could be a container image, an operating system image or anything that you can write a plugin for.</p>
<p>In this talk, I present <a href="https://gitlab.com/BuildStream/buildstream-sbom/">buildstream-sbom</a>. It's a tool that extracts information from a BuildStream project and uses it to generate an SPDX-formatted SBoM. I also discuss the issues that I had translating from BuildStream concepts to SPDX.</p>