The slow rise of SBOMs meets the rapid advance of AI

This report analyzes the evolving landscape of Software Bill of Materials (SBOMs), detailing recent U.S. and international policy moves (CISA guidance updates, FDA medical device requirements, DoD recommendations, and the EU’s Cyber Resilience Act), while highlighting persistent private‑sector adoption barriers such as legal concerns, inconsistent software naming, and limited buyer demand. It also examines whether AI-assisted coding could reduce dependency risks or make SBOMs less relevant, concluding that most experts doubt AI will yield vulnerability-free software and maintain that SBOM transparency remains essential.