Closed vargenau closed 1 year ago
I'm not sure if it is possible to mandate all vendors to create SBOM at some time. But likely build time is the best?
Oh, every vendor has to create an SBOM at some time - no vendor will create one at no time. :-)
But this isn't about requiring that all vendors create the SBOM at the same point in the build process, but that they record in the SBOM the choice the vendor made.
Signed-off-by: Marc-Etienne Vargenau marc-etienne.vargenau@nokia.com