Re: [edk2-devel] SBOM template for edk2

["Richard Hughes via groups.io" <richard=hughsie.com@groups.io>]

Hi all,

If anyone wants a quick overview of where things are, and where things are heading -- there's some fairly self-explanatory slides in https://docs.google.com/presentation/d/1OPBHYZAr9SWDrmXpistJrVqd8wdN94oOfDfFXoEjTxg/edit?usp=sharing

If anyone does want me to explain all that in more detail please just ask, I'd be happy to explain the bigger picture -- or join the UEFI SBOM sub-team after Christmas and then you can ask questions to us all directly. :)

Richard

On Thursday, 12 December 2024 at 15:02, Dick Wilkins <Dick_Wilkins@phoenix.com> wrote:

> This is an ongoing discussion in the UEFI SBOM sub-team working group and we are aware of this PR. If you want feedback from that team, you can send email to usbt@uefi.org .
> 
> Dick
> 
> SBOM WG Vice-Chair
> 
> From: devel@edk2.groups.io <devel@edk2.groups.io> On Behalf Of Leif Lindholm via groups.io
> Sent: Thursday, December 12, 2024 6:33 AM
> To: devel@edk2.groups.io; discuss@edk2.groups.io
> Cc: Richard Hughes <richard@hughsie.com>; Kinney, Michael D <michael.d.kinney@intel.com>; Andrew Fish <afish@apple.com>
> Subject: [edk2-devel] SBOM template for edk2
> 
> [Caution, this message was sent from an external sender.]
> 
> Hi all,
> 
> Richard submitted a PR to add an SBOM .cdx.json template to the main repository:
> https://github.com/tianocore/edk2/pull/6455
> 
> This is a good thing, but I think we could do with some feedback from
> some of our
> downstream consumers.
> 
> I know there has been work ongoing inside UEFI forum around SBOM for
> UEFI firmware,
> and it might be useful for some of the people that have been more
> involved there to pitch
> in. Mike, do you know some appropriate people to ping?
> 
> /
> Leif
> 
> 
> 


-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#120925): https://edk2.groups.io/g/devel/message/120925
Mute This Topic: https://groups.io/mt/110078030/7686176
Group Owner: devel+owner@edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [rebecca@openfw.io]
-=-=-=-=-=-=-=-=-=-=-=-