New Open Source Framework Enhances SBOM Practices in Automotive Industry
PRAGUE, Oct. 7, 2026 /PRNewswire/ — During the Open Source Summit Europe, The Linux Foundation unveiled the OpenChain Automotive Software Bill of Materials (SBOM) Framework 1.0. This initiative aims to establish a standardized approach for creating and sharing comprehensive Software Bill of Materials tailored for the automotive sector, amid increasing regulatory and cybersecurity concerns.
As vehicles increasingly rely on complex software systems, the need for greater visibility into these components is vital. The OpenChain Automotive SBOM Framework offers a practical foundation that organizations can adopt and customize to address these industry challenges.
Key Components of the Framework Include:
- A structured method for detailing software components in Automotive SBOMs.
- Guidance on required and recommended data fields, ensuring completeness and quality.
- Compatibility with existing SBOM standards like SPDX (ISO/IEC 5962).
- Use cases for suppliers and OEMs to facilitate data exchange throughout the supply chain.
“This framework enhances transparency and trust across the entire supply chain,” said Mary Meixia Wang, General Manager of the OpenChain Project.
Collaborative Development
The framework emerged from discussions between industry leaders, including representatives from Toyota and Hitachi Solutions, highlighting a collective desire to improve software transparency and efficiency in the automotive field.
Supporting Quotes
- Jiro Watabe, Hitachi Solutions, Ltd.: “The framework enhances transparency and builds trust in the supply chain.”
- Hirofumi Inoue, Toyota Motor Corporation: “Sharing reliable SBOM information is vital for the industry’s progress.”
- Stuart Dross, FossID: “The Automotive SBOM provides a standard that supports software supply chain transparency.”
The OpenChain Automotive SBOM Project invites participation from both organizations and individuals around the globe, emphasizing its commitment to evolve based on industry needs and feedback. For more details, visit the OpenChain Project or access the SBOM Framework.
About the OpenChain Project
The OpenChain Project, hosted by the Linux Foundation, focuses on creating trust within the open-source supply chain by developing standards for compliance and security.
About the Linux Foundation
The Linux Foundation is the foremost hub for collaboration on open-source software, hardware, and standards, supporting projects that underpin vital global infrastructure.
For more information, visit linuxfoundation.org.
Media Contact:
The Linux Foundation
Email Contact
SOURCE: The Linux Foundation
