Lyt når som helst, hvor som helst

Dyk ned i over 1 million e- og lydbøger samt podcasts.

  • Over 1 million titler
  • Eksklusive titler + Mofibo Originals
  • Download og nyd titler offline
  • Opsig når som helst
Prøv nu
DK - Details page - Device banner - 894x1036
Cover for SBOMs in Practice: SPDX, CycloneDX, and CI Automation for Real Systems

SBOMs in Practice: SPDX, CycloneDX, and CI Automation for Real Systems

Sprog
Engelsk
Format
Kategori

Fakta

"SBOMs in Practice: SPDX, CycloneDX, and CI Automation for Real Systems"

SBOMs are easy to generate and hard to trust. This book is written for experienced engineers—security, platform, DevOps, and build/release leaders—who need SBOMs to function as dependable production artifacts rather than compliance checkboxes. It focuses on the realities that break automation: ambiguous component identity, lossy format conversions, incomplete dependency graphs, and the operational drift between what you built and what you actually deployed.

You’ll learn to design SBOMs that correlate cleanly with vulnerability and license data, using pragmatic identity strategies (purl, CPE where unavoidable, and digests when they truly help). The book goes deep on graph semantics for impact analysis, interoperability constraints across serializations, and the practical tradeoffs of SPDX (especially licensing fidelity) versus CycloneDX (security-centric modeling, services, and completeness signaling). It then ties everything together with scalable generation strategies—build, source/lockfile, binary/image, and runtime views—and a production CI blueprint with normalization, validation, diffing, drift detection, policy gates, VEX workflows, signing/provenance, and distribution.

Expect hands-on, pipeline-oriented guidance with decision criteria and failure modes called out explicitly. Readers should already be comfortable with modern build systems, dependency management, and CI/CD; the differentiator here is turning SBOM theory into an end-to-end, defensible operational capability.

© 2026 NobleTrex Press (E-bog): 6610001192396

Udgivelsesdato

E-bog: 24. marts 2026

Tags

    Vælg dit abonnement

    • Over 1 million titler

    • Download og nyd titler offline

    • Eksklusive titler + Mofibo Originals

    • Børnevenligt miljø (Kids Mode)

    • Det er nemt at opsige når som helst

    Den mest populære

    Premium

    For dig som lytter og læser ofte.

    129 kr. /måned

    • Eksklusivt indhold hver uge

    • Fri lytning til podcasts

    • Ingen binding

    Prøv gratis

    Unlimited

    For dig som lytter og læser ubegrænset.

    159 kr. /måned

    • Eksklusivt indhold hver uge

    • Fri lytning til podcasts

    • Ingen binding

    Start tilbuddet

    Family

    For dig som ønsker at dele historier med familien.

    Fra 179 kr. /måned

    • Fri lytning til podcasts

    • Kun 39 kr. pr. ekstra konto

    • Ingen binding

    Dig + 1 familiemedlem2 konti

    179 kr. /måned

    Prøv gratis

    Flex

    For dig som vil prøve Mofibo.

    89 kr. /måned

    • Gem op til 100 ubrugte timer

    • Eksklusivt indhold hver uge

    • Fri lytning til podcasts

    • Ingen binding

    Prøv gratis