"How to create the SBOM for the Linux kernel" ( 2026 )

Sunday at 13:40, 20 minutes, UD2.208 (Decroly), UD2.208 (Decroly), SBOMS and supply chains Maximilian Huber , slides , video

This presentation will explain how we built a tool that can create an SBOM for a Linux kernel build that describes the generated artifacts, the source files included and the build relations between them as an SPDX3 document. This is deduced from kernel specific build outputs. In our journey we overcame several hurdles and we want to share what we learned.