Software Bill Of Materials

The Software Bill Of Materials, or SBOM, is a formal list of components that were used in the development and supply chain of a product, according to the National Telecommunications and Information Administration (NTIA). We are committed to providing an automatically created SBOM for INETAPP, creating transparency into components used in your specific setup. That includes the core installation as well as additional plugins provided by i-net software GmbH.

The access to the generated SBOM is available by the URL https://<server>/.well-known/sbom with some requirements to be fulfilled:

  • The SBOM address must be accessed by a user with administrative permissions
  • The SBOM is only delivered in a CycloneDX JSON format, requiring the accessor to set the Accept header of the request to application/json

It is advised, that the administrative user makes use of the Token Authentication plugin, restricting the API Token to the .well-known/sbom URL only.

# REQUEST
GET /.well-known/sbom HTTP/1.1
Authorization: Bearer VGhpcyBpcyBqdXN0IGEgZGVtbyBhY2Nlc3MgdG9rZW4u
Accept: application/json
curl --request GET \
  --url https://my-company.com/.well-known/sbom \
  --header 'Accept: application/json' \
  --header 'Authorization: Bearer VGhpcyBpcyBqdXN0IGEgZGVtbyBhY2Nlc3MgdG9rZW4u'