If we a gree to provide SBOM for our releases: a source SBOM (json file) file will be provided together with the download link and will provide insight on our fill source code and license a build SBOM (json file) will be generated after a build containing only the code that was compiled on that device
@Sebastien Lorquet <sebast...@lorquet.fr> I understand your neutral position since you don't use SBOM but if we prepare for 2026 I think that we should support SBOM to help our users Comply with the EU and international requirements. Best regards Alin On Wed, 12 Feb 2025, 11:35 Sebastien Lorquet, <sebast...@lorquet.fr> wrote: > Hello > > I have an absolutely neutral position on this issue. > > We dont use sboms. > > but maybe in some future we might be required to provide it. However I > dont have any clue of that happening in the near or mid future. > > What does it look like? It's just a static file somewhere, right? > > Sebastien > > On 11/02/2025 10:53, Alin Jerpelea wrote: > > Hi all, > > > > I have been working on a SBOM implementation for our project and I think > > that we are getting ready top provide both source and build SBOMS like > > Zephyt. > > What is your opinion about SBOM? > > Would an SBOM help you and your company? > > > > Best regards > > Alin > > >
