Where is SBOM data surfaced in GitHub to aid vulnerability assessment and supply chain risk analysis?

• A. In the Insights dashboard
• B. In the Actions tab
• C. In the Security area
• D. In the Notifications panel

Answer: (C)

SBOM data is surfaced in GitHub within the Security area. This section is dedicated to security-related information for a repository, including vulnerability alerts, the dependency graph, and the Software Bill of Materials. Having the SBOM here lets you see exactly which components and versions are included, map them to known CVEs, and assess supply chain risk as part of vulnerability management. The Insights dashboard is focused on project analytics, the Actions tab on CI/CD workflows, and the Notifications panel on alerts and messages; none of these center on presenting the SBOM for risk analysis.