Software bill of materials

How it is used

Often shortened to SBOM. Used for dependency review and vulnerability response; a list alone does not prove a product is secure.

Example sentences

1. The software bill of materials showed that the release included an outdated parser library.

   The inventory identifies the shipped component rather than merely the source project's declared dependencies.

2. We regenerated the software bill of materials after replacing a transitive dependency.

   Indirect dependencies can change the shipped composition even without an application feature change.

Common collocations

• generate a software bill of materials
• software bill of materials inventory

Related terms

• dependencyA library, service or other piece of software that your code needs in order to work, so a change or failure in it can affect your project.
• vulnerabilityA weakness in software, hardware, a configuration or a process that an attacker could use to cause harm or to gain access they should not have.

More terms: Release and Maintenance

• deploy
• release
• production
• build
• ship
• documentation
• CI/CD
• hotfix
• roll back
• staging
• legacy code
• deprecate