SBOM at Scale - Securing Eclipse Foundation Projects With Automated Supply-Chain Visibility

Learn how to implement Software Bill of Materials (SBOM) at enterprise scale through this 16-minute conference talk that demonstrates the Eclipse Foundation's comprehensive approach to automated supply-chain visibility. Discover the end-to-end strategy for elevating SBOMs to first-class deliverables across all Eclipse Foundation project releases, supporting diverse libraries, runtimes, and tools. Explore practical implementation through plug-and-play GitHub Actions, CLI quickstarts, and sample pipelines that streamline SBOM generation, validation, and publication processes. Examine real-world case studies showing how historical SBOM data prepares organizations for regulatory compliance and enables rapid response to critical vulnerabilities like Log4Shell incidents. Gain insights into scaling an OWASP Dependency-Track registry, including its capabilities, performance limitations, metadata management challenges, and pragmatic solutions that maintain ecosystem security and compliance readiness.