SBOM for C++ by Haithem Jebali

What you'll learn

---

Understand why SBOM for C++ is hard
C++ SBOM types
Generate Build-Time SBOM using Conan package manager
Binary Analysis Techniques for C++
Requirements

---

Prior knowledge of SBOM and SBOM standards is obligatory
Description

---

Generating a Software Bill of Materials (SBOM) for C++ applications is significantly more challenging than for many other programming languages. Unlike ecosystems with centralized package managers, C++ projects often rely on a combination of build systems, package managers, operating system packages, vendored libraries, and static linking. As a result, creating an accurate SBOM requires a deeper understanding of the C++ software supply chain.
In this course, you'll learn how to generate, analyze, and manage SBOMs specifically for C++ applications. You'll explore the unique challenges of dependency discovery, build-time versus runtime dependencies, static and dynamic linking, and how modern C++ package managers such as Conan help create reliable, reproducible SBOMs.
Through hands-on demonstrations, you'll learn how to integrate SBOM generation, inspect dependencies, analyze Linux ELF binaries, and understand how binary analysis complement build-time SBOMs. You'll also discover why many organizations adopt a multi-layer SBOM strategy to improve software transparency and security.
By the end of this course, you'll understand not only how to generate SBOMs for C++ projects, but also how to interpret them, validate them, and integrate them into modern development and CI/CD workflows.
What you'll learn

---

Understand why SBOM generation is uniquely challenging in the C++ ecosystem.
Learn how Conan builds dependency graphs and uses them as the foundation for SBOM generation.
Generate build-time SBOMs for C++ applications.
Understand the differences between build-time, binary, and deployment SBOMs.
Inspect Linux ELF binaries and Windows binaries to identify runtime dependencies.
Learn how binary analysis complements build-time SBOMs.
Whether you're a C++ developer, build engineer, DevOps engineer, security professional, or software architect, this course will give you the practical knowledge needed to generate and manage SBOMs for modern C++ applications with confidence.
Who this course is for

---

Developers dealing with the generation of SBOM for C++
Homepage

---