"C/C++ Build-time SBOMs with pkgconf" ( 2026 )

Sunday at 15:30, 30 minutes, UD2.208 (Decroly), UD2.208 (Decroly), SBOMS and supply chains Ariadne Conill , slides , video

Build-time SBOMs for traditional C/C++ applications have historically been difficult to generate. To improve this situation, we have been extending pkgconf to support generating high-quality build-time SBOMs, as the pkg-config database already understands all of the build dependency relationships needed for a build-time SBOM. This talk is intended to be a walk through using the new pkgconf 3.x SBOM tools to generate a high quality build-time SBOM for a project.