Post #2664627

The second presentation overlapped slightly with the first, but emphasized the tooling aspect: • #SBOM lifecycle and blueprint • Our modular SBOM toolchain for generation, refinement, analysis and storage • Integration into DevOps workflows • Our central compliance portal for teams and governance owners • And how we delight our various users. This is all heavily based on many great #OpenSource projects, such as those by @anchore@mstdn.business and @homebrew@fosstodon.org. https://mehl.mx/blog/2026/deutsche-bahns-approach-to-large-scale-sbom-collection-and-use/ [🧵 3/3]