sneSCM

Scandinavian Network of Excellence
in
Software Configuration Management

Time: Thursday, September 14th, 2023, 15:30-16:30 (CET).

Place: Axis Communications AB, Emdalavägen 14, Lund or video conferencing at your own computer.

Title: Should SBoMs be static or dynamic?

Hosts: Fredrik Gustafsson, Axis Communications AB.

At Axis we have been delivering SBoMs with our products since the beginning of January, 2023.

At this CMCM, we will first briefly present what we have been doing, why we have done it and how it has been carried out how they are produced and when. We will also share our experiences with SBoMs so far.

However, for us the most important is "what is the next step?". We have a few ideas for that and would like to discuss them with the participants in the CMCM. One thing in particular is whether or not an SBoM should contain both static and dynamic data. What do you think - and why? What are the pros and cons?

Registration is mandatory by email to Lars Bendix (bendix@sneSCM.org).

When you register, please state if you want to attend in person or online - and include your name and a question/problematic/aspect that you would like the hosts to address during the CMCM.