fuzzyfuzzyfungus on Nostr: One place where SBOMs seem like they could be genuinely handy is in contexts where ...

One place where SBOMs seem like they could be genuinely handy is in contexts where you are doing some sort of default-deny execution restrictions. Someone who can generate an SBOM should be in a good position to, exactly, specify what policy their software would require to run when not default allowed.

Asking has gotten me some very weird looks, though, so apparently that isn't a thing in practice.