thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

DevOps & Automation · Intermediate

Software Bill of Materials (SBOM)

A formal, machine-readable inventory of all components and dependencies in a piece of software.

Definition

SBOMs in SPDX or CycloneDX format enable rapid vulnerability impact assessment and license compliance. They can be generated in CI by tools like Syft and attached to releases or images.

Example

syft myapp:1.2 -o spdx-json > sbom.json

Exam tip

SBOM formats to know: SPDX and CycloneDX.

Related terms