KernelSBOM: Reconstructing Linux Kernel Builds into Trusted SPDX Bills of Materi... Maximilian Huber
Linux Plumbers Conference · 33:47
A work-in-progress Python tool reconstructs a Linux kernel build graph after the fact from Kbuild .cmd files (plus a few heuristics), then emits three interlinked SPDX SBOMs—source, build, and output—with the long-ter...