Make it an SBOM one like: https://www.kosli.com/blog/generating-and-tracking-sboms-with-kosli-enhancing-software-security-and-supply-chain-transparency/
