Brazil, Australia, Zurich, Yokohama Patch 6, Yokohama
Standalone Application
SBOM Core helps organizations maintain the searchable inventory of all the open-source components used in their environment.
- Upload SBOM files with an API or manually. This application supports XML and JSON formats for CycloneDX. JSON format is supported for SPDX.
- Search the inventory of files to identify your potential risk of exposure with a specific component.
Fixed:
- The "Parse BOM" asynchronous business rule has been removed, resolving slow code execution during SBOM ingestion.
- Component relationship imports in SBOM Core no longer create duplicate relationships, preventing inflated counts on BOM entities. The relationship buffer now avoids duplicate entries, and existing duplicates are deactivated rather than deleted. Counts are recalculated accurately, and active rows are preferred over inactive duplicates.
Not applicable for this application version. For more information, please see
Application Runtime Policy
- Required roles: sn_sbom_core.sbom_ingest, sn_sbom_core.admin.
- Dependencies: At a minumum, the Data Model for SBOM application must also be installed to upload SBOMs.