- Initiative
- Back to Initiative
- Area
- Supply Chain
- Status
- Planning
- Supporters
- -
- Funding
- More Funding Required
Goals
Runtime SBoM introspection, Cryptography SBoM, and Build SBoM for release artifacts and Docker images.
Impact
By enabling runtime SBoM introspection in the Erlang VM and providing Cryptography and Build SBoMs for core infrastructure releases, this milestone completes the SBoM coverage across the entire software lifecycle. Runtime introspection allows developers to query dependency information from running systems, while Cryptography SBoMs document cryptographic algorithm usage for compliance requirements. Build SBoMs for Docker images and release artifacts ensure a complete, auditable record of all software components in production deployments, fostering stronger security, compliance, and trust within the Erlang and Elixir communities.
Deliverables
- Erlang Runtime Introspection - Details TBD
- Core Infrastructure SBoM