KernelSBOM: Reconstructing Linux Kernel Builds into Trusted SPDX Bills of Materi... Maximilian Huber
Автор: Linux Plumbers Conference
Загружено: 2025-12-18
Просмотров: 47
Описание:
KernelSBOM: Reconstructing Linux Kernel Builds into Trusted SPDX Bills of Materials - Maximilian Huber
This talk presents KernelSBOM, a tool that reconstructs the complete Linux kernel build graph by analyzing .cmd files to recover the exact commands, inputs, and outputs used during compilation. KernelSBOM generates three interlinked SPDX 3.0 documents—source, build, and output—that comprehensively encode all build metadata and dependencies. We demonstrate our approach, discuss its benefits for supply chain security and compliance, and examine current limitations. Our ultimate goal: make kernel SBOMs practical and integrate SBOM generation directly into the kernel build process.
Повторяем попытку...
Доступные форматы для скачивания:
Скачать видео
-
Информация по загрузке:
