Sep 12 – 14, 2022
Europe/Dublin timezone

SBOM Generation for the Linux Kernel using Yocto Project tooling

Not scheduled
1h 30m
"Meeting 6" (Clayton Hotel on Burlington Road)

"Meeting 6"

Clayton Hotel on Burlington Road

Birds of a Feather (BoF) BOFs Session


Saul Wold


This talk will address what was done to extend the SPDX tooling in the Yocto Project to generate SPDX for the Linux kernel. Last year the Yocto Project added support for generating SPDX data from upstream projects that are built for creating an embedded linux image. Initially, that work was done for userspace libraries and applications. The Yocto Project extended the functionality to the kernel. I will provide examples of the output from the kernel and kernel modules using the current tooling and challenges moving forward. Future ideas will be discussed including how to get better details and incorporate additional information about Security related issues.

I agree to abide by the anti-harassment policy Yes

Primary author

Saul Wold

Presentation materials

There are no materials yet.