CycloneDX is an OWASP-stewarded standard for software, hardware, and machine-learning bills of materials (SBOM). It provides a structured inventory of components, dependencies, and vulnerabilities for supply-chain transparency.