SWHID Introduction and applications for SBOMs

Software Heritage collects publicly available source code from numerous software projects and tracks their ongoing development. 

SWHIDs (from "SoftWare Hash IDentifiers") are persistent, intrinsic identifiers for software source code artifacts such as source code files, source trees, commits, and other objects typically found in version control systems. 

SWHID has been officially adopted as ISO/IEC 18670:2025 on April 23, 2025. The first international standard for persistent, content-based identification of software artifacts.

Introduction to Software Hash Identifier focused on two audiences:

• Open Source legal and compliance experts working in the CRA standards
• OpenChain (open source management) practitioners from different industries, especially from the Telco industry

Agustín Benito Bethencourt (Toscalix) is an Software Heritage ambassador.