GitHub repository: sthagen/specification
Description: Software Bill-of-Material (SBOM) specification designed for use in application security contexts and supply chain component analysis