Read more: https://www.scworld.com/perspective/why-sboms-are-not-enough-to-manage-modern-software-risks