As a Developer, I want automated SBOM creation, so that I can ensure compliance effortlessly.

[branic18]

Provide an automated solution for SBOM generation to facilitate compliance and transparency in the development lifecycle.

Priority: High

User Personas

• Developer
• DevOps
• AppSec/Security
• Legal/Compliance
• Engineering Lead

Acceptance Criteria

• Given a project with dependencies, when a build is initiated, then an automated SBOM is generated and integrated.

Subtasks

• Develop algorithms for automatic SBOM generation.
• Integrate SBOM functionality with existing tools.

Ordered Steps

1. Integrate SBOM generation in build pipelines.
2. Verify SBOM creation in test environments.

Definition of Done

SBOMs are automatically created for every build and accessible via the SCA tools.

Referenced Insights

• e09ba734-7983-47f8-8331-7858ecaec0f7