SBOM data for Components: SPDX, CycloneDX, ....

[Erne_H]

Hi,

for regulatory compliance and managing our software supply chain, we are looking for sbom data of your components/libraries. Can you provide SPDX or CycloneDX data or what are your plans regarding this topic?

Some side notes:

• Embarcadero also finally seems to take action here (even though only by promoting some partner apps): https://blogs.embarcadero.com/what-is-sbom-and-why-is-it-so-important-this-year/…
• There is also a (rather current) discussion going on on the German DelphiPraxis community: Software Bill of Materials, kurz SBOM - wer hat das?

Thanks!

[Pieter]

We have been working on a tool that can generate the SBOM, but I want to ask which products you need an SBOM for, we can generate them and then see if this is sufficient for your needs

[Erne_H]

Hi Pieter,

thanks for the feedback - basically we would need the TMS FNC UI sbom(s) - but I would also be interested in how you generate/automate sbom creation in general (we are currently playing with ORT)…

Thanks!