Challenges of Producing Software Bill of Materials for Java
Musard Balliu, Benoît Baudry, Sofia Bobadilla, Mathias Ekstedt, Martin Monperrus, Javier Ron, Aman Sharma, Gabriel Skoglund, César Soto-Valero, Martin Wittlinger
Abstract
Software bills of materials (SBOMs) promise to become the backbone of software supply chain hardening. We deep-dive into six tools and the SBOMs they produce for complex open source Java projects, revealing challenges regarding the accurate production and usage of SBOMs.
Topics & Concepts
JavaComputer scienceSoftwareSoftware engineeringSoftware analyticsSoftware developmentOperating systemComponent-based software engineeringSoftware Engineering ResearchSoftware Engineering Techniques and PracticesOpen Source Software Innovations