diff --git a/README.md b/README.md
index 515fb81..4a5eb30 100644
--- a/README.md
+++ b/README.md
@@ -19,9 +19,8 @@ My usual tech stack is C# .NET in combination with Typescript (React or Angular)
 
 ### SBOM
 
-- [ ] [OWASP dep-scan](https://owasp.org/www-project-dep-scan/)
+- [ ] [OWASP dep-scan](https://owasp.org/www-project-dep-scan/) - uses - [CycloneDX](https://cyclonedx.org/) under the hood
 - [ ] [Microsoft sbom-tool](https://github.com/microsoft/sbom-tool)
-- [ ] [CycloneDX](https://cyclonedx.org/)
 
 ### License Scanning