Skip to main content
FOSDEM PWA

C/C++ Build-time SBOMs with pkgconf

UD2.208 (Decroly) | Day 2 | 15:30 - 16:00 | Speakers: Ariadne Conill

C/C++ Build-time SBOMs with pkgconf
A picture of a devroom at FOSDEM 2024
Open in browser

Notes

Abstract

Build-time SBOMs for traditional C/C++ applications have historically been difficult to generate. To improve this situation, we have been extending pkgconf to support generating high-quality build-time SBOMs, as the pkg-config database already understands all of the build dependency relationships needed for a build-time SBOM. This talk is intended to be a walk through using the new pkgconf 3.x SBOM tools to generate a high quality build-time SBOM for a project.

Attachments

Speakers

Ariadne Conill

Ariadne Conill is a software engineering leader, FOSS developer, and security expert known for her long-standing contributions to Linux ecosystems, including early work on Alpine Linux and the creation of the Wolfi GNU/Linux distribution. She maintains core system packages such as pkgconf, libucontext and ifupdown-ng as part of her work in Alpine. Professionally, she is a co-founder and distinguished engineer at Edera, a company which builds a hardened runtime environment for cloud-native and edge-native workloads.

Notice: The placeholder video image is licensed under CC BY-SA 4.0. The original image can be found hereChanges made to the image are: Cropped the image to a new ratio, part of the image was cut off.