Introduces a new guide explaining SBoMs: what they are, why they matter (vulnerability analysis, regulatory requirements, license compliance), and how to generate them for Elixir projects using mix_sbom. Also covers CI integration via GitHub Action and mentions ORT for deeper file-level license scanning.