Software bills of materials.

Machine-readable component inventories for every image and firmware build.

Standards

  • SPDX 3.0 (ISO/IEC 5962 for SPDX 2.2.1)
  • CycloneDX 1.6 (ECMA-424)

OT security and software supply chain