Generating SBOMs for IoT at Build Time

Explore the process of generating Software Bill of Materials (SBOMs) for Internet of Things (IoT) devices during the build phase in this informative conference talk by Steve Winslow from The Linux Foundation. Gain insights into the Zephyr operating system, its build process, and post-build analysis techniques. Learn about the goals and approaches for SBOM generation, including the Version 0 approach and leveraging metadata through zephyrspdx. Discover areas for improvement in the SBOM generation process and key takeaways for implementing this practice in IoT development. The talk concludes with a Q&A session, providing an opportunity to deepen your understanding of SBOM generation for IoT devices.

Introduction
What is Zephyr
Zephyr Build Process
PostBuild Analysis
Goals
Version 0 approach
Leveraging metadata
zephyr
spdx
Metadata
Areas for Improvement
Takeaways
QA