Andreas Bielk, Co-founder and CTO, SBOM Observer
Creating SBOMs for C/C++ applications is unique challenges, precise and high quality ones, even more so. Compiled languages without a standard package manager means that the tactics used in other ecosystems doesn’t really work. Applications built from a mix of languages, like Javascript, or Python, with C/C++ dependencies provide similar challenges, where important dependencies are missing from SBOMs today. In this talk we present the problem, a novel solution, learnings from production usage, and possible future work.