“A lightweight software bill of materials standard designed for use in application security contexts and supply chain component analysis.”

Transcript evidence from Patrick Dwyer -- CycloneDX and SBOMs.