Some SBOM background

[Craig Russell]

https://cwiki.apache.org/confluence/display/SECURITY/SBOM+Software+Bill+of+Materials

Craig L Russell
c...@apache.org