The Linux Foundation published version 1.0 of the OpenChain Automotive Software Bill of Materials Framework, a standard approach for describing and exchanging software component data across the automotive supply chain. The framework sets out a structure for automotive SBOMs, guidance on required and recommended fields with completeness and quality criteria, alignment with SPDX (ISO/IEC 5962) and usage scenarios for suppliers and OEMs, without replacing existing standards. OpenChain general manager Mary Meixia Wang said software-defined vehicles make transparency and traceability across components essential, and the effort grew out of early work by contributors from Toyota, Hitachi Solutions and the OpenChain Automotive Working Group. The project is open to participation and will evolve based on industry feedback and adoption.
Linux Foundation releases OpenChain Automotive SBOM Framework 1.0
The Linux Foundation published version 1.0 of the OpenChain Automotive Software Bill of Materials Framework, a standard approach for describing and exchanging software component data across the automotive supply chain. The framework sets out a structure for automotive SBOMs, guidance on required and recommended fields with completeness and quality criteria, alignment with SPDX (ISO/IEC 5962) and usage scenarios for suppliers and OEMs, without replacing existing standards. OpenChain general manager Mary Meixia Wang said software-defined vehicles make transparency and traceability across components essential, and the effort grew out of early work by contributors from Toyota, Hitachi Solutions and the OpenChain Automotive Working Group. The project is open to participation and will evolve based on industry feedback and adoption.
Source: Linux Foundation