Summery

Add consumers to the tooling so the generated SBOMs are consumed by some available tooling like SBOM scanners. This would be interesting for two reasons:

• Look if the SBOMs are actually consumable. Some are missing important fields or don't provide the necessary information to e.g. find vulnerable Dependencies.
• It would also be interesting what comes up while scanning. How good are the tools that are looking for vulnerable dependencies.

Currently this is out of scope for my paper but maybe for some further work.