SBOMit

The SBOMit specification is a SBOM format independent method for attesting components with additional verification information.