SBOM Compliance Series (Part 1): Understanding NTIA Minimum Elements

In this blog, we’ll be discussing about NTIA minimum element SBOM Compliance. This blog is the first part of an SBOM compliance series. The series is about covering all different SBOM compliances framework one by one and understand why they exist and what they actually expect from an SBOM and lastly to check whether your SBOM is compliant or not. Before diving into NTIA minimum element compliance specifically, let’s understand the core of SBOM: ...

January 28, 2026 · 8 min · 1587 words · Vivek Sahu

sbomqs Scoring Support for BSI 1.1 and BSI 2.0 in a Summarized Way

Hey SBOM community, Love to see you back here learning something new. If you’re working with SBOMs, you probably know that generating SBOM is just a first step. What you get after generating SBOM is just a raw SBOM ? And the raw SBOM is incomplete, inaccurate sometime and most importantly not even comply with NTIA minimum element according to this research whitepaper. ...

September 23, 2025 · 5 min · 970 words · Vivek Sahu

What’s Missing in Your SBOM? sbomqs List Can Help You in Inspecting...

Hey there 👋 SBOM practitioners, compliance engineers, and open-source watchers! If you’ve been working with SBOMs lately—whether you’re producing them or consuming them—you’ve probably noticed how quickly they’ve gone from “nice to have” to absolutely essential. I hope now your getting comfortable on working with SBOMs and familiar with software supply chain security terminologies. We all are well-known about the wake-up call on SBOMs, ...

September 23, 2025 · 7 min · 1341 words · Vivek Sahu