Software bill of materials

A machine-readable inventory of every component and version inside an artefact, generated at build time. Its value is almost entirely retrospective: when the next widely-exploited library lands, the question is which of four hundred deployed images contain it, and an SBOM turns that from an archaeology project into a query. It is increasingly a procurement requirement as well, which is usually what finally gets one generated.