Software bill of materials (SBOM)

Under the EU Cyber Resilience Act (CRA), the mandatory requirement to have an SBOM (Software Bill of Materials) begins when the CRA’s full obligations apply — 11 December 2027.

Software

• Fossology Github Action: run license and copyright scans as GitHub Action, also generates SBOM