Skip to main content
FOSDEM PWA

LibreOffice and Collabora Online - how we managed to automate SBOM generation for a large legacy project

UD2.208 (Decroly) | Day 2 | 12:40 - 13:00 | Speakers: Thorsten Behrens

LibreOffice and Collabora Online - how we managed to automate SBOM generation for a large legacy project
A picture of a devroom at FOSDEM 2024
Open in browser

Notes

Abstract

This is a case study of how we managed to analyse & subsequently automate the SBOM generation for a very large, legacy code base. Come and hear about our journey to lift the LibreOffice-family open source projects into modern software supply chain management times, including some war stories about particularly obnoxious dependencies, as well as what tools (standard, as well as home-grown) we're using for that.

Attachments

Speakers

Thorsten Behrens

Thorsten is a LibreOffice and Collabora hacker and a standards wonk. During his now 25 years of tenure with the project, he's spent most of his time hacking the code in areas ranging from build system, platform abstraction libraries, Impress and Writer.

Thorsten's a computer scientist by education, and a Free Software enthusiast by heart, a geek from early childhood - and someone who was lucky enough to turn a hobby into an occupation. After first working for Sun Microsystems on then-OpenOffice.org, he then went with a number of others founding The Document Foundation and the LibreOffice project.

These days, his day job includes substantial amounts of project management and customer interactions, which does not prevent him from still messing with the code occasionally. He's recently merged his company with Collabora, for extra oomph in helping customers migrate to digital sovereign open source software!

Notice: The placeholder video image is licensed under CC BY-SA 4.0. The original image can be found hereChanges made to the image are: Cropped the image to a new ratio, part of the image was cut off.