OpenChain-Project / Telco-WG

This is the OpenChain Telco Work Group
Other
13 stars 6 forks source link

Update SBOM build information #15

Closed vargenau closed 1 year ago

vargenau commented 1 year ago

Signed-off-by: Marc-Etienne Vargenau marc-etienne.vargenau@nokia.com

winterrocks commented 1 year ago

I'm not sure if it is possible to mandate all vendors to create SBOM at some time. But likely build time is the best?

stephenkilbaneadi commented 1 year ago

Oh, every vendor has to create an SBOM at some time - no vendor will create one at no time. :-)

But this isn't about requiring that all vendors create the SBOM at the same point in the build process, but that they record in the SBOM the choice the vendor made.

eaglei15 commented 1 year ago

6CFEF42E-61DA-4ED9-87DF-BB03E1298143