4.1.1 Integration Patterns

Build-Time Integration Pattern

Integrate generation immediately following successful compilation. Capture both direct and transitive dependencies while build context remains available. Generate supplementary metadata including build environment details and compilation parameters. Many build environments such as Yocto, Kubernetes, Linux, Zephyr, etc. have automatic SBOM generation capabilities already integrated, and the build just needs to enable them.

Event-Triggered Generation Pattern

Configure repository webhooks to initiate generation upon specific events. Support multiple trigger types including commit or pull request, and release events. Implement queuing mechanisms to handle concurrent generation requests. Maintain generation history for audit and rollback capabilities.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

3. Réglementations associées

• ENISA -