Report by Manifest
Beyond the Black Box: How AI is Forcing a Rethink of Software Supply Chain
8 FINDINGSPublished Mar 3, 2026
View Original Report →Key Findings
Adoption of SBOMs is 59% in larger enterprises versus nearly 32% in small organizations.
SBOMEnterprise Security
60% of organizations generate SBOMs.
SBOMSoftware Supply ChainSoftware Security
63% of organizations acknowledge that there is "shadow AI" within their organizations.
Shadow AIAI Governance
42.4% of teams address AI separately from standard governance structures.
AI GovernanceGovernance
Organizations that get verifiable transparency data from vendors see 64% quicker implementation of new technology.
TransparencyVendor RiskSoftware Supply Chain
More than half of organizations that generate SBOMs are not actually consuming or managing them in practice.
SBOMSoftware Supply ChainOperational Management
Organizations that get verifiable transparency data from vendors see 61.6% quicker resolution of security issues.
TransparencySecurity Issue ResolutionSoftware Security
About 56% believe Software Composition Analysis (SCA) tools are noisy and delay development teams.
Software Composition Analysis