SW360 SBOM: Managing Vulnerability Information, SPDX Documents and New Depen... Kouki Hama & Tien Le

SW360 SBOM: Managing Vulnerability Information, SPDX Documents and New Dependency Network Between a Project and Software Components - Kouki Hama & Tien Le, Toshiba Corporation

In this presentation, Kouki Hama will give an overview of SW360 and introduce its architecture. Then Tien Le will demonstrate the new features of SW360: vulnerability registration, SPDX input/output, and OSS dependency management.