[digitalsanctum]

As I read this I wonder if SBOM (Software Bill of Materials)[1] could be used? I'm not sure if it already has configuration files as part of it's definition but doesn't seem like a stretch to add? Btw, I've never used SBOM in practice but seems like something worthwhile implementing.

[1] https://www.cisa.gov/sbom#:~:text=A%20%E2%80%9Csoftware%20bi....