SBOM
Abbreviation · Security & Infosec
Definitions
Software Bill of Materials — a complete inventory of all components, libraries, and dependencies in a software application, including their versions and licenses. Required by US Executive Order 14028 for software sold to the government. Enables rapid vulnerability response — when Log4Shell hits, you can instantly check if you're affected.
In plain English: A complete list of every library and dependency in your software, like an ingredients list for code.
Example: "Generate an SBOM with Syft and scan it with Grype — we need to know within minutes if any dependency has a new CVE."
Related Terms
- Audit Log
- Dependency Confusion
- Credential Rotation
- Supply Chain Security
- SLSA
- Sigstore
- SOC 2
- Audit Trail
- Mobile Device Management
- SBOM Analysis
- WORM Storage
- Third-Party Library
- Vendoring
- License Compatibility
- Open Source Supply Chain
- Package Security
- Transitive Dependency
- CMMC
- Data Sovereignty
- Grey Market
- Hardware Implant
- ISO 27001
- ISO 27002
- Outdated Dependency
- PCIDSS
- Procurement Security
- Left Pad