Is the training Qualiopi certified?

Yes, Learni is a Qualiopi-certified training organization. This certification guarantees the quality of our courses and enables funding through OPCO and other mechanisms.

How can I fund my training?

Our courses are eligible for OPCO funding. Learni supports you through the funding process. A personalized quote is available upon request.

What are the prerequisites for this training?

The prerequisites for the Training SBOM - Mastering Secure Software Traceability training are: Experience with CI/CD, Docker/Kubernetes containers, basics in vulnerability analysis. A preliminary interview validates your eligibility.

Is the training available in person?

Yes, the Training SBOM - Mastering Secure Software Traceability training is available in remote. The format can be adapted to your needs (inter, intra, custom).

Training SBOM - Mastering Secure Software Tracea... | Learni

The story of Learni

Founded by passionate advocates of learning and innovation, Learni set out to make professional training accessible to everyone, everywhere in the world. Our team works in the largest cities such as Paris, Lyon, Marseille, and internationally, to support talents and organizations in their skills development.

Configure your training

Response within 24hNo commitment100% free

9 spots remaining for the next session

FormatParticipantsDateDetails

Which format do you prefer?

Methods, approaches, and teaching resources

The Training SBOM - Mastering Secure Software Traceability training is delivered in-person or remotely (blended-learning, e-learning, virtual classroom, remote in-person). At Learni, a Qualiopi-certified training organization, each program is designed to maximize skills acquisition, regardless of the training mode chosen.

The trainer alternates between demonstrative, interrogative, and active methods (through practical exercises and/or real-world scenarios). This pedagogical approach ensures concrete and directly applicable learning in the workplace.

Teaching resources provided

To ensure the quality of the Training SBOM - Mastering Secure Software Traceability training, Learni provides the following teaching resources:

Mac or PC computers, high-speed fiber internet, whiteboard or flipchart, video projector or interactive touchscreen (for remote sessions)
Training environments installed on workstations or accessible online
Course materials, practical exercises, and supplementary resources
Post-training access to materials and teaching resources

For in-house training at a location external to Learni, the client ensures and commits to having all necessary teaching materials (IT equipment, internet connection...) for the proper conduct of the training action in accordance with the prerequisites indicated in the communicated training program.

* contact us for remote feasibility** ratio varies depending on the training followed

Assessment methods

The assessment of skills acquired during the Training SBOM - Mastering Secure Software Traceability training is carried out through:

During training: case studies, practical exercises, and professional scenarios
At the end of training: self-assessment questionnaire and skills evaluation by the trainer
After training: training completion certificate detailing acquired skills

Training accessibility

Learni is committed to the accessibility of its professional training programs. All our training programs are accessible to people with disabilities. Our teams are available to adapt teaching methods to your specific needs. Do not hesitate to contact us for any accommodation request.

Training access terms and deadlines

Training objectives

Master SBOM standards for professional, certifying traceability

Generate and validate SBOMs in complex enterprise environments

Integrate advanced SBOM analysis into DevSecOps pipelines

Develop skills in supply chain risk detection and remediation

Design SBOM strategies compliant with EU regulations

Optimize SBOM management for scaling in secure production

Training program

Module 1SBOM Standards: Generate and Validate with SPDX/CycloneDX (Syft, ORT, advanced tools)

Dive into SPDX and CycloneDX specifications to produce professional SBOMs, install and configure Syft and ORT on your real projects, generate complete inventories of open-source and proprietary dependencies, validate compliance via JSON/YAML schemas, perform practical exercises on an enterprise case with code review by the trainer, produce your first deliverable and optimized SBOM for audit.

Module 2SBOM Integration: CI/CD Pipelines and Automated Analysis (GitHub Actions, Jenkins, Trivy)

Integrate native SBOM generation into GitHub Actions and Jenkins for seamless automation, pair with Trivy and Grype for real-time vulnerability scanning, develop custom workflows on your private repositories, test differential analysis between SBOM versions, apply alert threshold policies, build a monitoring dashboard via Python scripts, and deploy an end-to-end pipeline on a secure ongoing project.

Module 3Advanced SBOM Management: Compliance, Audits, and Remediation (SLSA, VEX, enterprise tools)

Deepen SBOM compliance with SLSA and VEX to mitigate false positives, simulate EU regulatory audits such as the Cyber Resilience Act, integrate enterprise tools like Dependency-Track for centralized management, develop automated remediation strategies, analyze real supply chain breach cases like Log4Shell, produce a scalable SBOM action plan for your enterprise, and conclude with a certifying project presentation.