Supply Chain
SBOM
Also: software bill of materials
A machine-readable list of the components and dependencies inside a piece of software.
In more detail
When a new vulnerability is announced, an SBOM lets you answer 'are we affected?' by lookup instead of by hunting. Common formats are SPDX and CycloneDX. An SBOM is only as good as its freshness, so generate it in the build and store it with each release.