SBOM

A Software Bill of Materials (SBOM) is like an ingredient list for your software. It's a detailed inventory that shows exactly what components, libraries, and dependencies make up your software installation, including their versions, licenses, and often contains any known security vulnerabilities.

SBOM is related to Reproducible Builds - see https://reproducible-builds.org/

We recently added SBOM generation for the Meza project.

Reference

Here are some offsite references about the importance, role, and tooling or standards in SBOM

1. https://www.cisa.gov/sbom
2. https://www.ntia.gov/page/software-bill-materials
3. https://openssf.org/technical-initiatives/sbom-tools/