Software Bill of materials

[DanielVoogsgerd]

Considering the increasing interest around Brane and the possible upcoming release. I think it is a good idea to add a software bill of materials to the release artifacts.

I did some superficial research into this and came up with to possible solutions:

• cargo-auditable
• cyclonedx-rust-cargo

The former one is pretty neat as it includes the data into an ELF section which allows a tool like cargo audit to make use of that information.

The latter is more widely known and is in a format people will probably be more used to.

[Lut99]

Hmm, I’m getting GitHub 404 errors on both of them? That’s weird xD

I’m on phone, maybe something’s broken there. Will try again on PC later.