Linux Foundation Launches OpenChain Automotive SBOM Framework 1.0
October 7, 2026 – PRAGUE
At the Open Source Summit Europe, the Linux Foundation announced the release of the OpenChain Automotive Software Bill of Materials (SBOM) Framework 1.0. This initiative aims to establish a common approach for creating and sharing high-quality SBOMs in the automotive industry, addressing increasing regulatory and cybersecurity needs.
Key Features of the Framework:
- Defined Structure: Provides a format for describing software components and dependencies in SBOMs.
- Data Fields Guidance: Specifies required and recommended fields with criteria for completeness and quality.
- Alignment with Standards: Matches existing SBOM standards, such as SPDX (ISO/IEC 5962).
- Usage Scenarios: Offers guidance for both suppliers and OEMs, facilitating data exchange in the automotive supply chain.
Importance
As software complexity in vehicles increases, the framework enhances transparency and trust throughout the supply chain, responding to demands for better visibility into software components.
Mary Meixia Wang, General Manager of the OpenChain Project, emphasized the need for consistency in SBOM practices to aid in software transparency, traceability, and compliance.
Collaborative Development
The framework’s creation involved key figures such as Keisuke Takase (Toyota) and Masato Endo (Chair, OpenChain Automotive Working Group), in collaboration with various stakeholders to identify industry challenges.
Participation and Further Information
The project is open for participation and is set to evolve with industry input. For more details, visit the OpenChain Project website or access the framework here.
Supporting Quotes
- Jiro Watabe, Hitachi Solutions: Highlights the framework’s role in enhancing supply chain transparency.
- Hirofumi Inoue, Toyota Motor Corporation: Stresses the importance of reliable SBOM sharing for effective automotive software development.
- Stuart Dross, FossID: Commits to supporting the new standard for improved transparency.
About the OpenChain Project
Managed by the Linux Foundation, the OpenChain Project focuses on fostering trust in the open source supply chain through developing standards for software compliance and security.
About the Linux Foundation
The Linux Foundation is a leader in open source collaboration, supporting projects that underpin infrastructure and innovation across technology sectors. For additional information, visit linuxfoundation.org.
For more comprehensive updates, access the original announcement here.
