Occassionally I do write whitepapers
OpenSSF SBOM Everywhere SIG
This paper focuses on custom romās and check for security misconfigurationās which could yield to device compromise.
detect application frameworks, current approach, enhancement and prevention.