SBOM Release Gates for Small Teams: From Inventory to Action
How small teams turn generated SBOMs into release gates that change what ships: consumption checks in CI, one canonical format, exploitability-aware triage, and expiring exceptions with retained evidence.