VEX (Vulnerability Exploitability eXchange)Supply-Chain Security Vulnerability Sbom Standards Compliance
SLSA (Supply-chain Levels for Software Artifacts)Supply-Chain Security Provenance Attestation Build Openssf
KEV (CISA Known Exploited Vulnerabilities Catalog)Security Vulnerability-Management Compliance Cisa Supply-Chain