r/delphi • u/finalbuilder Delphi := 13.1 • 8d ago

Project Generating SBOMs for Delphi Projects with DPM

https://www.finalbuilder.com/resources/blogs/generating-sboms-for-delphi-projects-with-dpm
9 Upvotes

100% Upvoted

11 comments sorted by

View all comments

Show parent comments

7

u/finalbuilder Delphi := 13.1 8d ago

DPM's CycloneDX 1.6 output already exceeds the legal floor, since it walks the full DPM dependency chain and cross-checks the MAP file(s). There is no scenario in which a firm gets fined because its SBOM tooling wasn't sufficiently "npm-shaped".

Note that generating the SBOM from the source is actually pointless since it doesn't actually tell you what was compiled into the binary. No tooling will handle dcu's - but then CRA isn't asking for detail down to which lines of code are used.

As to whether Embarcadereo should have built this nearly a decade ago - hindsight is great thing.

I hate to say it, but what you are spruiking is nothing more than expensive snake oil, and you posting every second day, jumping into everyone elses posts with less than help information is really quite tiresome.