Some SBOMs can be shared widely.
Many SBOMs will need to be shared in private.

RKVST SBOM Hub makes it easy to find and fetch both public and private SBOMs.

Private SBOMs can be advertised with a refBOM - but only those with the right permissions can see the full SBOM.