The FDA also requires SBOMs as of a few years ago for medical device software.