OWASPASVS 5.0 requirement

ASVS-V15.1.2 An inventory catalog, such as software bill of materials (sbom), is maintained of all third-party libraries in use, including verifying…

L2 Published 2025 Official page ↗

Standard: OWASP ASVS 5.0
Chapter: V15 Secure Coding and Architecture
Section: V15.1 Secure Coding and Architecture Documentation
Level: L2 (requirement applies from this verification level up)

Requirement

Verify that an inventory catalog, such as software bill of materials (SBOM), is maintained of all third-party libraries in use, including verifying that components come from pre-defined, trusted, and continually maintained repositories.