If compiling a software bill of materials seems daunting, attack surface management tools can provide many of the benefits.