An SBOM focuses on all of the software components (including open source components) in the codebase, as well as components, dependencies versions, patch status, and licenses. A Cybersecurity Bill of Materials (CBOM) also includes a hardware bill of materials together with an SBOM.