Workshop

Generating a Software Bill of Materials (SBOM) is only the first step toward compliance with upcoming regulations like the EU Cyber Resilience Act (CRA). The real challenge lies in managing these artifacts at scale, tracking vulnerabilities across a diverse portfolio, and communicating real-world risks effectively.

This workshop takes you beyond simple pipeline scanning. We will dive into OWASP Dependency-Track, an intelligent component analysis platform that allows organizations to identify and reduce risk in their software supply chain. You will learn how to transform static SBOMs into a living, automated security ecosystem.