https://rafeeqrehman.com/2022/08/05/software-bill-of-material-and-vulnerability-management-blind-spots/