---
title: "SBOMs and dependency provenance"
description: "How can you trace component provenance using an SBOM and build metadata?"
status: "coming-soon"
language: "en"
canonical: "https://bulnik.dev/en/articles/topics/T49.09/"
topicId: "T49.09"
---

> Coming soon — this article is being prepared. Below are its question, intended outcome, and place in the story.

## The question

How can you trace component provenance using an SBOM and build metadata?

## What we will work through

Trace component provenance using an SBOM and build metadata.

## Before you begin

Previously covered: CI pipelines and verifiable release gates.

- [CI pipelines and verifiable release gates](/en/articles/topics/T47.10/)