SSBOM1SCA1SDLC1security7Software composition analysis2software development1software vulnerability1supply chain1supply chain attack1