For the complete documentation index, see llms.txt. This page is also available as Markdown.

Deploying SBOM360

SBOM360 provides continuous software supply chain security management by mapping the lineage of your programs. It helps you generate and analyze Software Bills of Materials, assess risk across dependencies, and protect against software supply chain attacks.

Choose a deployment mode for deploying SBOM360.

CLI Binary

With CLI Binary, you can deploy and manage SBOM360 on your own VM.

Download the CLI from the Lineaje Portal, then complete installation in Installing CLI.

AWS Marketplace

You can deploy Lineaje SCA360 in your AWS environment by subscribing to the Lineaje service and creating a stack and then configuring the instance in the Lineaje Portal.

Step 1: Deploying Lineaje SCA360 Through AWS Marketplace

  1. Log in to the AWS Marketplace and search for Lineaje SCA360 in the AWS Marketplace products.

    Search for Lineaje in AWS Marketplace
  2. Click on View purchase options and click Subscribe.

    Lineaje purchase options
  3. Click Set up your account and enter the details.

    Enter account details
  4. Click Next.

  5. Click Deploy to set up SCA360 in your preferred AWS region.

  6. On the Stacks page, a pre-filled CloudFormation template is displayed. Enter the following information:

    • VPC ID: Choose your preferred VPC to define the network boundary of your AWS resources. VPC ID must be created prior to deployment. To learn more, see Prerequisites.

    • Subnet ID: Choose a subnet where your resources will be launched within the VPC. Subnet ID must be created prior to deployment. To learn more, see Prerequisites.

    • CIDR IP Range: Enter 0.0.0.0/0. Accesses the VM or EC2 instance to allow access of all IP addresses. To allow a specific IP address access, set CIDR to x.x.x.x/32.

    • Key Pair: Select the Key Pair. Key Pair must be created prior to deployment. To learn more, see Prerequisites.

    Aws stacks page
  7. Under Capabilities, check I acknowledge that that AWS CloudFormation might create IAM resources.

  8. Click Create stack.

Step 2: Configuring Lineaje SCA360 in the Lineaje Portal

  1. Log in to the Lineaje Portal.

  2. In the left-hand navigation, select Integrations.

  3. Click Scan Remotely to create an SBOM by connecting to your relevant SCM or Container Registry. Click Upload and Scan > Upload Manifest File if you want to generate SBOM by uploading a Manifest File.

    Scan remotely
  4. To create an SBOM using your GitHub repository:

    1. In Scan Remotely, select GitHub.

    2. In the Details section, enter a name for your integration and enter a GitHub link.

    3. Click Next.

    Add details
  5. In the Repositories section, select the tag or branch you want to scan from your GitHub repository and click Save Configuration.

    Select tag or branch
  6. Under Project Name, click on your project to view the enriched SBOM.

  7. Click Actions to download the SBOM.

    Download the SBOM
Open Virtual Appliance (OVA)

Set up your Windows 11 environment to deploy Lineaje SCA360. Install the required components, configure a virtual machine, and deploy SCA360 using Gitbash.

Step 1: Installing the Required Components

Install the following on your Windows 11 system (use default settings):

Step 2: Setting Up a Virtual Machine

  1. Download the OVA file from the SharePoint link sent to your email address.

  2. Open Oracle VirtualBox > File > Import Virtual Application.

  3. Select the OVA file and click Finish.

  4. After import, go to Settings.

    Settings
  5. In the System section, set Base Memory to 4096 MB.

    System section
  6. In the Network section, click on Port Forwarding.

    Port forwarding
  7. Create a new rule with the following configuration:

    • Name: SSH

    • Protocol: TCP

    • Host IP: 127.0.0.1

    • Host Port: 2222

    • Guest Port: 22

New rule configuration
  1. Click OK.

  2. Click OK to save the settings. 8. Start the virtual machine. 9. Log in using the following credentials:

    • Username: lineaje

    • Password: lineaje

The default host key is the right Ctrl key. The minimum disk space is 20 GB. For POC, a minimum 100 GB is recommended.

  1. Confirm that the CLI is installed correctly by checking its version.

./veecli --version

If SSH or download fails, type the command sudo dhclient. Verify that the virtual machine has internet connectivity by performing a simple network check, such as sending a ping request to a reliable website (e.g., Google).

Next steps

After deployment, complete these steps for all modes:

Last updated