Proposal for 3.12 SBOMs for containers

[vargenau]

Signed-off-by: Marc-Etienne Vargenau marc-etienne.vargenau@nokia.com

[winterrocks]

How about commercial components in containers? I would like to know those too.

[Jimmy-ahlberg]

Commercial components in a container is nothing I feel we can mandate, however we could possibly ask that the open source components in a commercial component be included? (There might be other agreements of confidentiality that would prevent us from disclosing the use of such commercial component).