Worked on the PHOENIXCONTACT/MORYX-Framework repository to implement Software Bill of Materials (SBOM) generation for NuGet packages, addressing compliance requirements under the Cyber Resilience Act. Leveraging C#, XML, and NuGet, the developer integrated Microsoft’s sbom-tool into the release workflow, ensuring each package included a manifest folder containing both the SBOM and a SHA256 hash for artifact verification. This approach enhanced supply chain transparency and streamlined regulatory checks for software releases. Collaboration with other contributors focused on maintaining code quality and security alignment, resulting in a robust, automated process for producing compliant NuGet packages without introducing new bugs.