OmniBOR: Bringing the Receipts for Supply Chain Security
Explore a comprehensive conference talk on OmniBOR, a revolutionary approach to supply chain security. Learn how to capture the full artifact dependency graph of software as an output of build tools, addressing challenges with SBOM scanners and false positives. Discover the concept of artifact dependency graphs, Merkle trees, and the minimum elements required for effective software identification. Gain insights into the OmniBOR community, its potential impact on SBOMs, and the future of build tool integration. Understand the importance of reproducibility and hash functions in software security. Engage with discussions on adoption tooling, practical applications, and the call to action for implementing this innovative solution in software development processes.