Following up on the discussions during the community meeting, we’ve prepared an initial list of example across different ecosystems to help expedite decisions on how best an SBOMit integration should reconcile differences.
Let us know if this makes sense, and what (if any) more information you’d be interested in looking at.
The sheet also links to detailed attestations (along with the commands used to run them) for each of the examples.
Thanks! and looking forward to working on this more.
- Sanchit