diff --git a/Makefile b/Makefile
index 78150a36d4..873f88eab7 100644
--- a/Makefile
+++ b/Makefile
@@ -90,7 +90,7 @@ help_coreboot help::
 	@echo  '*** coreboot platform targets ***'
 	@echo  '  Use "make [target] V=1" for extra build debug information'
 	@echo  '  all                     - Build coreboot'
-	@echo  '  sbom                    - Rebuild SBOM (sbom.uswid) from existing build artifacts'
+	@echo  '  sbom                    - Rebuild SBOM (sbom.uswid) from existing build artifacts (FIXME)'
 	@echo  '  clean                   - Remove coreboot build artifacts'
 	@echo  '  distclean               - Remove build artifacts and config files'
 	@echo  '  sphinx                  - Build sphinx documentation for coreboot'
diff --git a/src/sbom/Makefile.mk b/src/sbom/Makefile.mk
index 1f52a9aa6b..2502099b99 100644
--- a/src/sbom/Makefile.mk
+++ b/src/sbom/Makefile.mk
@@ -404,4 +404,6 @@ sbom-acm-clean:
 	$(if $(CONFIG_SBOM_BIOS_ACM_GENERATE),rm -f $(build-dir)/intel-bios-acm.json,)
 	$(if $(CONFIG_SBOM_SINIT_ACM_GENERATE),rm -f $(build-dir)/intel-sinit-acm.json,)
 
+## FIXME: this target doesn't reliably trigger regeneration of sbom.uswid, which
+##        is easy to see by running `make --debug=b sbom` once or twice
 sbom: $(build-dir)/sbom.uswid