Are SBOMs a "thing" yet? Is anybody using SBOMs in their day to day workflows?<p>The current tooling for <i>generating</i> them seems to have matured, but tools for storing and managing an SBOM inventory seem non-existent with exception for OWASP Dependency-Track.