DevSecOps · hands-on lab

DevSecOps Lab 02: Build an SBOM with syft

Generate a software bill of materials (SBOM) for a project with syft — the inventory every later security step depends on.

Create an account to start Use or ask for a voucher

25 minutesTime in the lab
beginnerLevel
2 tasksChecked automatically
CertificateVerifiable link when you finish

The situation

Scenario. Auditors ask: what is actually in this build? You answer with an SBOM — a machine-readable list of every component — generated with syft in the standard CycloneDX format.

What you will do

Generate a CycloneDX SBOM
What is an SBOM for?question

How it works

The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.