SPDX 3.0 - a migration journey
- Track: Software Bill of Materials devroom
- Room: K.4.401
- Day: Sunday
- Start: 09:05
- End: 09:30
- Video only: k4401
- Chat: Join the conversation!
SPDX 3.0 supports several new use cases, such as security vulnerability analysis, AI and Data compliance as well as increased flexibility in how the SPDX data is shared. Although many of the changes are compatible with previous versions of SPDX, there are also some "breaking changes" that require migration. In this talk, we will be discussing our real-world experience migrating the SPDX Java tools to support the 3.0 specification. Although the talk is centered on Java, the information will be useful for any software development project interested in supporting SPDX 3.0.
Speakers
Gary O'Neall |