On Tue, Feb 11, 2025 at 10:54 AM Alin Jerpelea <jerpe...@gmail.com> wrote: > Hi all, > I have been working on a SBOM implementation for our project and I think > that we are getting ready top provide both source and build SBOMS like > Zephyt. > What is your opinion about SBOM? > Would an SBOM help you and your company?
Thanks Alin for your hard and tedious work on SBOM! Yes, this is important for two main reasons: 1. It clarifies legal part regarding licensing. 2. It clarifies technical part regarding dependencies that impacts maintenance. Along providing SBOM solution it would be nice to provide bullet points on why this is important, what if provides, and how this can be used :-) Thanks again! :-) Tomek -- CeDeROM, SQ7MHZ, http://www.tomek.cedro.info