https://peertube.debian.social/videos/watch/194e9f80-5c97-44d4-a9fa-a5cf24704ea0 by Christoph Steiger At: MiniDebConf Hamburg 2026 https://hamburg2026.mini.debconf.org/talks/18-sboms-for-debian/ With the EU Cyber Resilience Act (CRA) looming on the not-so-distant horizon SBOMs have emerged as the primary standard for describing the contents of your products. As none of the tools available produced adequate SBOMs for Debian-based systems we decided to roll our own: debsbom, which is already available for Debian and has a backport for Debian trixie. In this talk I will talk about what SBOMs are, what makes them actually useful and what this specifically means for Debian SBOMs. I will take a dive into Debian packages and their relationships and how all of that can be modeled in an SBOM. To bring it all together I will go through common workflows and how they can now be automated with the help of debsbom. I would also like to use this talk to open a discussion about some areas of improvement for Debian packages. Room: Seminarroom Scheduled start: 2026-05-10 12:00:00+02:00 Sun, 30 Aug 2026 09:46:27 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.debian.social https://peertube.debian.social/client/assets/images/icons/icon-96x96.png https://peertube.debian.social/videos/watch/194e9f80-5c97-44d4-a9fa-a5cf24704ea0 All rights reserved, unless otherwise specified in the terms specified at https://peertube.debian.social/about and potential licenses granted by each content's rightholder.