docs: tie SBOM to OSSF

open-sauced · Oct 29, 2024 · a1dee8d · a1dee8d
1 parent f906c4d
commit a1dee8d
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/docs/welcome/key-metrics-guide.md b/docs/welcome/key-metrics-guide.md
@@ -36,6 +36,8 @@ You can read more about [what it is and how it can be interpreted](../../feature
 
 This helps you evaluate how secure a repository is and how attentive maintainers are to compliance issues. It's also a good metric to evaluate whether or not a repo is secure. Users can see the security scores of all their dependencies.
 
+Additionally, you can create [SBOMs (Software Bill of Materials)](../../../features/repo-pages/#create-a-workspace-from-sbom) for projects you use or want to contribute to. This contains a list of all the parts used to build a software including dependencies and libraries. You can read more about [SBOM here](https://opensauced.pizza/blog/security-and-SBOMs).
+
 You can read more about [what it is and why it is important](https://opensauced.pizza/blog/introducing-openssf-scorecard-for-opensauced).
 
 ## Lottery Factor