Lyt når som helst, hvor som helst

Dyk ned i over 1 million e- og lydbøger samt podcasts.

  • Over 1 million titler
  • Eksklusive titler + Mofibo Originals
  • Download og nyd titler offline
  • Opsig når som helst
Prøv nu
DK - Details page - Device banner - 894x1036
Cover for Syft for SBOM Generation: Producing Accurate Inventories from Real Artifacts

Syft for SBOM Generation: Producing Accurate Inventories from Real Artifacts

Sprog
Engelsk
Format
Kategori

Fakta

"Syft for SBOM Generation: Producing Accurate Inventories from Real Artifacts"

SBOMs are easy to generate and hard to trust. This book is for experienced security engineers, platform teams, and DevSecOps practitioners who need SBOMs that hold up under audits, incident response, and automated policy enforcement—because they are derived from the actual artifacts you ship. It treats SBOM generation as an engineering discipline, not a checkbox, and shows how Syft fits into real-world supply-chain workflows where drift, ambiguity, and tool churn can quietly break correctness.

You’ll learn how Syft’s scanning pipeline works end-to-end—sources, catalogers, normalization, and serialization—so you can reason about where inaccuracies originate. The book dives into deterministic execution (pinning versions, repeatable runs), artifact targeting and scope (images vs filesystems, layer semantics), and controlling discovery through cataloger selection, overrides, and performance tuning. It also covers format strategy and metadata fidelity: choosing SPDX/CycloneDX/Syft JSON wisely, producing stable identifiers (PURLs/CPEs), and handling relationships without over-claiming dependencies. Advanced chapters show how to use Syft JSON as a lossless archive, convert without silent data loss, and implement rigorous SBOM QA with golden samples, diffs, and regression tests.

Prerequisites include comfort with containers, CI/CD, and software packaging ecosystems. Practical guidance extends to trusted delivery: DSSE/in-toto attestations, Cosign signing and verification, release-time pipeline placeme

© 2026 NobleTrex Press (E-bog): 6610001191030

Udgivelsesdato

E-bog: 20. marts 2026

Tags

    Vælg dit abonnement

    • Over 1 million titler

    • Download og nyd titler offline

    • Eksklusive titler + Mofibo Originals

    • Børnevenligt miljø (Kids Mode)

    • Det er nemt at opsige når som helst

    Den mest populære

    Premium

    For dig som lytter og læser ofte.

    129 kr. /måned

    • Eksklusivt indhold hver uge

    • Fri lytning til podcasts

    • Ingen binding

    Prøv gratis

    Unlimited

    For dig som lytter og læser ubegrænset.

    159 kr. /måned

    • Eksklusivt indhold hver uge

    • Fri lytning til podcasts

    • Ingen binding

    Start tilbuddet

    Family

    For dig som ønsker at dele historier med familien.

    Fra 179 kr. /måned

    • Fri lytning til podcasts

    • Kun 39 kr. pr. ekstra konto

    • Ingen binding

    Dig + 1 familiemedlem2 konti

    179 kr. /måned

    Prøv gratis

    Flex

    For dig som vil prøve Mofibo.

    89 kr. /måned

    • Gem op til 100 ubrugte timer

    • Eksklusivt indhold hver uge

    • Fri lytning til podcasts

    • Ingen binding

    Prøv gratis