4.1.1 Integration Patterns

Build-Time Integration Pattern

Integrate generation immediately following successful compilation. Capture both direct and transitive dependencies while build context remains available. Generate supplementary metadata including build environment details and compilation parameters. Many build environments such as Yocto, Kubernetes, Linux, Zephyr, etc. have automatic SBOM generation capabilities already integrated, and the build just needs to enable them.

Event-Triggered Generation Pattern

Configure repository webhooks to initiate generation upon specific events. Support multiple trigger types including commit or pull request, and release events. Implement queuing mechanisms to handle concurrent generation requests. Maintain generation history for audit and rollback capabilities.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

3. Relaterede reguleringer

• ENISA -

  EN: Publications of the European Union Agency for Cybersecurity (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Unless otherwise noted, licensed under CC BY 4.0. Changes: divided into sections, converted into the GRCA format and linked to the EU legal acts they refer to; images and material of third parties are not reproduced. Only the versions published by ENISA are authoritative.

  DE: Veröffentlichungen der Agentur der Europäischen Union für Cybersicherheit (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Soweit nicht anders vermerkt, lizenziert unter CC BY 4.0. Änderungen: in Abschnitte aufgeteilt, in das GRCA-Format umgewandelt und mit den EU-Rechtsakten verknüpft, auf die sie sich beziehen; Bilder und Material Dritter werden nicht wiedergegeben. Maßgeblich sind allein die von der ENISA veröffentlichten Fassungen.