If you ship open source to DoW: DoWI 8430.01 (effective September 8, 2026) requires SBOMs for all covered software, including transitive dependencies (§3.5.b), and a risk review of third-party and open source components (§3.5.i(2)). On our side, Anchore Enterprise generates SBOMs at every build and imports vendor SBOMs. Here's the mapping: https://anchore.com/blog/dow-instruction-8430-01-makes-software-evidence-a-condition-to-operate/ #SBOM #OpenSource #SoftwareSupplyChain