“What I do is I take my SBOM and I rerun the vulnerability report against it and create a new VEX, right?”

Transcript evidence from Brett Smith -- Security is a Necessary Evil.