"Living the SBOM life - the good, the bad and the evil parts" ( 2025 )

Saturday at 15:00, 50 minutes, K.1.105 (La Fontaine), K.1.105 (La Fontaine), Main Track - K Building Olle E. Johansson , slides , video

SBOMs are in the limelight now as the silver bullet for many things - open source license compliance, vulnerability management, copyright management and the path towards a healthy, secure and CRA-certified happy state of a binary life. But behind all this marketing and makeup is a fairly simple syntax and a lot of missing pieces in the puzzle. Let’s dive into the SBOM lifestyle together and look at the current status, the hopes and the vision for a toolset with less hype, but more real benefits for compliance, developers, product managers, with a chance of being a workhorse in risk management as well as the automatic vulnerability management toolchain. Help us make the SBOM dream come true, listen to the talk and then walk the SBOM walk!