A structured list detailing components and dependencies used in software.

A structured list detailing components and dependencies used in software.

• A. software bill of materials (SBOM)
• B. software composition analysis (SCA)
• C. threat feeds
• D. Reputational threat intelligence

Answer: (A)

A software bill of materials is a structured list detailing the components and dependencies used in software. It inventories every library, package, and version included in a product, providing a clear view of what makes up the software. This enables teams to identify vulnerable or outdated components, manage license obligations, and assess supply chain risk. Software composition analysis relies on this inventory to detect issues, but the SBOM itself is the data artifact that lists the components. Threat feeds focus on indicators of active threats and malware campaigns, not the composition of the software. Reputational threat intelligence pertains to external perceptions and risk, not the technical makeup of the software.

A software bill of materials is a structured list detailing the components and dependencies used in software. It inventories every library, package, and version included in a product, providing a clear view of what makes up the software. This enables teams to identify vulnerable or outdated components, manage license obligations, and assess supply chain risk. Software composition analysis relies on this inventory to detect issues, but the SBOM itself is the data artifact that lists the components. Threat feeds focus on indicators of active threats and malware campaigns, not the composition of the software. Reputational threat intelligence pertains to external perceptions and risk, not the technical makeup of the software.