Deploying SBOM360
SBOM360 provides continuous software supply chain security management by mapping the lineage of your programs. It helps you generate and analyze Software Bills of Materials, assess risk across dependencies, and protect against software supply chain attacks.
Choose a deployment mode for deploying SBOM360.
CLI Binary
With CLI Binary, you can deploy and manage SBOM360 on your own VM.
Download the CLI from the Lineaje Portal, then complete installation in Installing CLI.
AWS Marketplace
You can deploy Lineaje SCA360 in your AWS environment by subscribing to the Lineaje service and creating a stack and then configuring the instance in the Lineaje Portal.
Step 1: Deploying Lineaje SCA360 Through AWS Marketplace
Log in to the AWS Marketplace and search for
Lineaje SCA360in the AWS Marketplace products.
Click on View purchase options and click Subscribe.

Click Set up your account and enter the details.

Click Next.
Click Deploy to set up SCA360 in your preferred AWS region.
On the Stacks page, a pre-filled CloudFormation template is displayed. Enter the following information:
VPC ID: Choose your preferred VPC to define the network boundary of your AWS resources. VPC ID must be created prior to deployment. To learn more, see Prerequisites.
Subnet ID: Choose a subnet where your resources will be launched within the VPC. Subnet ID must be created prior to deployment. To learn more, see Prerequisites.
CIDR IP Range: Enter
0.0.0.0/0. Accesses the VM or EC2 instance to allow access of all IP addresses. To allow a specific IP address access, set CIDR tox.x.x.x/32.Key Pair: Select the Key Pair. Key Pair must be created prior to deployment. To learn more, see Prerequisites.

Under Capabilities, check I acknowledge that that AWS CloudFormation might create IAM resources.
Click Create stack.
Step 2: Configuring Lineaje SCA360 in the Lineaje Portal
Log in to the Lineaje Portal.
In the left-hand navigation, select Integrations.
Click Scan Remotely to create an SBOM by connecting to your relevant SCM or Container Registry. Click Upload and Scan > Upload Manifest File if you want to generate SBOM by uploading a Manifest File.

To create an SBOM using your GitHub repository:
In Scan Remotely, select GitHub.
In the Details section, enter a name for your integration and enter a GitHub link.
Click Next.

In the Repositories section, select the tag or branch you want to scan from your GitHub repository and click Save Configuration.

Under Project Name, click on your project to view the enriched SBOM.
Click Actions to download the SBOM.

Open Virtual Appliance (OVA)
Set up your Windows 11 environment to deploy Lineaje SCA360. Install the required components, configure a virtual machine, and deploy SCA360 using Gitbash.
Step 1: Installing the Required Components
Install the following on your Windows 11 system (use default settings):
Step 2: Setting Up a Virtual Machine
Download the OVA file from the SharePoint link sent to your email address.
Open Oracle VirtualBox > File > Import Virtual Application.
Select the OVA file and click Finish.
After import, go to Settings.

In the System section, set Base Memory to 4096 MB.

In the Network section, click on Port Forwarding.

Create a new rule with the following configuration:
Name: SSH
Protocol: TCP
Host IP: 127.0.0.1
Host Port: 2222
Guest Port: 22

Click OK.
Click OK to save the settings. 8. Start the virtual machine. 9. Log in using the following credentials:
Username:
lineajePassword:
lineaje
The default host key is the right Ctrl key. The minimum disk space is 20 GB. For POC, a minimum 100 GB is recommended.
Confirm that the CLI is installed correctly by checking its version.
./veecli --version
If SSH or download fails, type the command sudo dhclient. Verify that the virtual machine has internet connectivity by performing a simple network check, such as sending a ping request to a reliable website (e.g., Google).
Next steps
After deployment, complete these steps for all modes:
Last updated