📦
SBOM
Security
Software Bill of Materials: structured inventory of components, versions, and dependencies for risk management.
Definition
An SBOM documents software components, versions, and dependencies (including transitive ones). It supports vulnerability management, incident response, and supply-chain transparency.
In plain English
Software Bill of Materials: structured inventory of components, versions, and dependencies for risk management.
Why this matters
Why it matters: Without component visibility, organizations struggle to assess exposure during widespread vulnerabilities.
Example
Example: Generate SBOMs during builds, store them with releases, and correlate SBOMs with vulnerability databases to prioritize patching.