From 0054d3acbc3017d2a535239f8153d3c99f7abc18 Mon Sep 17 00:00:00 2001 From: Arthur Hanson Rasmusson Date: Fri, 2 Oct 2026 02:50:38 -0400 Subject: docs: add complete SBOM, ignore local deployment resources, remove stale third-party references --- docs/09-reference/legal-and-licensing.md | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'docs/09-reference/legal-and-licensing.md') diff --git a/docs/09-reference/legal-and-licensing.md b/docs/09-reference/legal-and-licensing.md index 57aad43..87d8002 100644 --- a/docs/09-reference/legal-and-licensing.md +++ b/docs/09-reference/legal-and-licensing.md @@ -2,6 +2,10 @@ > What is licensed how, what we may redistribute, and how we stay clean while > doing adversarial interoperability. +> +> The complete component and license inventory is the SBOM: +> [`../../SBOM.md`](../../SBOM.md) (machine-readable: +> [`../../sbom/open-iov-0.1.0.cdx.json`](../../sbom/open-iov-0.1.0.cdx.json)). ## 1. The project's licenses -- cgit v1.2.3