OpenSSF publication

Software Bill of Materials

Also known as: SBOM

A machine-readable inventory of the components contained in a software artifact. Multiple authoritative formats exist (CycloneDX, SPDX); this record models the SBOM concept itself rather than any single format.

Read the publication