My OSSNA talk is now up on the Linux Foundation YouTube channel: Beyond SBOMs
SBOMs tell you what's in your software. Not what you're allowed to do with it. That's the gap ClearlyDefined fills.
If you've ever fought a NOTICE file, this one's for you: www.youtube.com/watch?v=gUF1...