Name: Towards Quality SBOMs: The OpenChain Telco SBOM Guide - Marc-Etienne Vargenau, Nokia
Start: 2025-08-27T16:20:00+0200
End: 2025-08-27T17:00:00+0200

25-27, August 2025
Amsterdam, Netherlands
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit Europe 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Central European Summer Time, CEST (UTC +2). To see the schedule in your preferred timezone, please select from the drop-down menu to the right.

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

Wednesday August 27, 2025 16:20 - 17:00 CEST

G105

OpenChain is the international standard for open source license compliance programs ; it has been created by a joined effort of the community. The OpenChain project has several work groups. The Telco work group was formed to create a recommendation for an SBOM format to be exchanged between telecommunication companies, their suppliers and customers.

The result is the "OpenChain Telco SBOM Guide" that describes what a quality SBOM should contain and how and when it should be distributed. It includes industry standard requirements like "NTIA SBOM Minimum elements" and PURL. Although developed by telcos, it is generic and can be used by other industries.

The OpenChain Telco SBOM Guide is used by Nokia as a basis for its SBOM format. The talk will discuss lessons learned from implementing the Guide at Nokia. Putting the Guide in practice has led the community to provide a minor release 1.1.

Nokia provided an open source tool to validate SBOMs against the Guide. It allows to recursively validate linked SBOMs. It is available under Apache-2.0 license.

Speakers

Marc-Etienne VARGENAU

Senior Specialist Open Source, Nokia

Marc-Etienne Vargenau is a member of the Open Source team at Nokia. He has worked as an Open Source developer for many years. Among other projects, he contributed to FusionForge (https://fusionforge.org/) and PhpWiki (https://sourceforge.net/projects/phpwiki/). He is contributing... Read More →

Wednesday August 27, 2025 16:20 - 17:00 CEST
G105

OpenGovCon

Audience Experience Level Beginner

Open Source Summit Europe 2025

Marc-Etienne VARGENAU

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!