Creating SBOMs from Manifests -- syft, grype

Tooling Package Management
3

I have never needed or used it, but [ANN] PkgToSoftwareBOM v0.1.12: Options to include the package server and artifact build scripts in the SBOM should be of some relevance.