Ask HN: How do you approach tagging assets to catalog software system deps?

I'm hoping there's a standardized format/schema out there for "cataloging all the assets" that make up a software system. I.e, from Storage drives to container images, etc. would all have a centralized db entry with a unique UUID, and perhaps other attributes.

Purpose is for risk management, I'm sure this is a tractable (read: solved) problem; but my research skills are failing me this morning.

I'm picturing something like an ARN but across a company. We can leverage terraform meta to tag things consistently