Software Bill of Materials

A machine-readable inventory of every component and dependency in a build, enabling teams to trace which shipped artifacts contain a newly disclosed vulnerability.

grounded in: trend theme 'Systems security & long-lived vulnerabilities: a memory-safety bug hidden in every Linux distro for 15 years' — SBOMs are the established supply-chain artifact for finding which distros/b