Considering the increasing interest around Brane and the possible upcoming release. I think it is a good idea to add a software bill of materials to the release artifacts.
I did some superficial research into this and came up with to possible solutions:
The former one is pretty neat as it includes the data into an ELF section which allows a tool like cargo audit to make use of that information.
The latter is more widely known and is in a format people will probably be more used to.
Considering the increasing interest around Brane and the possible upcoming release. I think it is a good idea to add a software bill of materials to the release artifacts.
I did some superficial research into this and came up with to possible solutions:
The former one is pretty neat as it includes the data into an ELF section which allows a tool like cargo audit to make use of that information.
The latter is more widely known and is in a format people will probably be more used to.