Software bill of materials basics — what SBOMs contain, common formats, generation in CI/CD, and how they support vulnerability response, compliance, and supply chain security.