How do you manage and analyze SBOMs