Transparent Supply Chains: First-Class SBOMs in Daemonless & dbuild
Supply chain security in modern container ecosystems is often treated as a post-build afterthought: a secondary scanner runs against a finished image and tries to infer what packages are inside. When building native FreeBSD OCI images at Daemonless, we decided to make supply chain transparency a first-class citizen from day one. With recent updates to our custom build system (dbuild), every container image generated across our entire fleet now produces multi-format Software Bill of Materials (SBOM) artifacts directly at build time. ...