SK607

Google osv-scanner is a dependency vulnerability scanner that supports SBOM: https://google.github.io/osv-scanner/usage/