Requirements

Prior knowledge of SBOM and SBOM standards is obligatory

Description

Generating a Software Bill of Materials (SBOM) for C++ applications is significantly more challenging than for many other programming languages. Unlike ecosystems with centralized package managers, C++ projects often rely on a combination of build systems, package managers, operating system packages, vendored libraries, and static linking. As a result, creating an accurate SBOM requires a deeper understanding of the C++ software supply chain.

In this course, you'll learn how to generate, analyze, and manage SBOMs specifically for C++ applications. You'll explore the unique challenges of dependency discovery, build-time versus runtime dependencies, static and dynamic linking, and how modern C++ package managers such as Conan help create reliable, reproducible SBOMs.

Through hands-on demonstrations, you'll learn how to integrate SBOM generation, inspect dependencies, analyze Linux ELF binaries, and understand how binary analysis complement build-time SBOMs. You'll also discover why many organizations adopt a multi-layer SBOM strategy to improve software transparency and security.

By the end of this course, you'll understand not only how to generate SBOMs for C++ projects, but also how to interpret them, validate them, and integrate them into modern development and CI/CD workflows.

What You'll Learn

• Understand why SBOM generation is uniquely challenging in the C++ ecosystem.
• Learn how Conan builds dependency graphs and uses them as the foundation for SBOM generation.
• Generate build-time SBOMs for C++ applications.
• Understand the differences between build-time, binary, and deployment SBOMs.
• Inspect Linux ELF binaries and Windows binaries to identify runtime dependencies.
• Learn how binary analysis complements build-time SBOMs.

Whether you're a C++ developer, build engineer, DevOps engineer, security professional, or software architect, this course will give you the practical knowledge needed to generate and manage SBOMs for modern C++ applications with confidence.