OmniBOR: Bringing the Receipts for Supply Chain Security

Explore the innovative OmniBOR approach to supply chain security in this 31-minute conference talk by Frederick Kautz from SPIFFE/SPIRE. Discover how to overcome common challenges like false positives from SBOM scanners and time-consuming vulnerability verifications. Learn about a groundbreaking method for capturing the complete artifact dependency graph of your software as a direct output from build tools, rather than relying on post-build scans. Gain insights into the future of build tool integration and how this new approach can revolutionize your software security practices, saving time and improving accuracy in identifying real vulnerabilities.

OmniBOR: Bringing the Receipts for Supply Chain Security - Frederick Kautz, SPIFFE/SPIRE