Google, IBM & Meta Certificates – 40% Off
One plan covers every Professional Certificate on Coursera.
Unlock All Certificates
Learn how to integrate zero-touch Software Bill of Materials (SBOM) generation into your CI/CD pipelines using open-source tools in this 18-minute conference talk from the Linux Foundation. Discover how to balance speed and security in continuous delivery environments while meeting mandatory SBOM compliance requirements under various regulatory acts. Explore the implementation of FOSSology toolchain-powered solutions that seamlessly integrate with GitHub Actions and GitLab CI to automate dependency scanning for Python and Node.js projects, license and copyright detection, and SPDX SBOM generation in multiple formats including JSON, YAML, RDF, and Tag. Master the deployment of lightweight, Docker-based tools available on Docker Hub and GitHub Marketplace that enable CI-native package scanning on every pull request, making compliance and SBOM generation effortless for open-source developers and DevOps engineers working at scale.
