This is your work, valued
The SBOMit specification is a SBOM format independent method for attesting components with additional verification information.