Supply-chain records
Release software bills of materials
Each release keeps its own immutable CycloneDX and SPDX dependency inventory with a SHA-256 checksum.
Versioned archive
Supply-chain records
Each release keeps its own immutable CycloneDX and SPDX dependency inventory with a SHA-256 checksum.
Versioned archive