Producing and consuming SBOMs for firmware and tools: SPDX or CycloneDX inventories of components and licences, linking to CVE feeds for vulnerability exposure, and meeting customer and regulatory demands (EU CRA, US EO 14028, IEC 62443).
No statement on what tools can do has been recorded for this skill yet.
The Hub knows of no registered course, programme or certification for this skill yet.
Note from the research register: Firmware, security or release engineering role facing customer SBOM requirements; learned with SPDX/CycloneDX tooling and SCA scanners.
Register version 1.