3 tagged sbom management, measured the same way as everything else here.
Command
Compare dependency state between two points — two Git refs, two SBOM files, or two container image tags — and report what changed. diff runs the scan pipeline against both states, so the same target flags and gates apply to each side.
Command
Answer "why is this package here?" — trace every dependency path that pulls a package into the graph. explain runs the same detect and match stages as scan, then walks the graph from the project roots to the package you named.
Command
Resolve a target's dependencies into one consolidated graph, then optionally enrich, analyze, audit, and render it. scan is the pipeline every other graph command builds on — flags you learn here work the same way on explain and diff.