Raspberry Pi OS • SBOM (Software Bill of Materials) for Raspberry Pi OS

Hello,

I am looking for a SBOM (Software Bill of Materials) of the various flavours for the Raspberry Pi distribution, as delivered by img/iso file.
We use Raspberry Pi OS as the basis for a product and would like to be able to give our customers this information in the future.
We also antipicipate that this will be a requirement in the future to be compliant with the European Cyber Resilience Act.

I have not found any "official" SBOM coming from the Rasperry Pi Foundation.

If you do not already have any such files, do you plan to publish the SBOM in the future?

I unfortunately also have not found any information on how the Raspberry Pi OS is generated.
Is there any documentation I have overlooked?
I guess that you use some build system similar to yocto?
If so I might be able to generate the SBOM myself.

Thank you for your help,

Deadolus

Statistics: Posted by Deadolus — Thu Jul 04, 2024 12:37 pm

---