“Without the full SBOM, and we're looking for that full, not only my direct dependencies, but my, all of my transitive dependencies and all of my runtime and environmental dependencies as well.”

Transcript evidence from JC Herz and Steve Springett — SBOMs and software supply chain assurance.