Generating a SPDX SBOM for Your Code in CI Using ORT

Generating a SPDX SBOM for Your Code in CI Using ORT

Explore the process of generating a Software Package Data Exchange (SPDX) Software Bill of Materials (SBOM) for code in Continuous Integration (CI) environments using the OSS Review Toolkit (ORT) in this informative conference talk. Learn from Thomas Steenbergen of HERE Technologies as he demonstrates how to implement this crucial practice, enhancing software transparency and security in the development pipeline.