> For the complete documentation index, see [llms.txt](https://docs.veedna.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.veedna.com/deploying-lineaje/hybrid-deployment/deploying-sbom360.md).

# Deploying SBOM360

SBOM360 provides continuous software supply chain security management by mapping the lineage of your programs. It helps you generate and analyze Software Bills of Materials, assess risk across dependencies, and protect against software supply chain attacks.

Choose a deployment mode for deploying SBOM360.

<details>

<summary>CLI Binary</summary>

With CLI Binary, you can deploy and manage SBOM360 on your own VM.

Download the CLI from the Lineaje Portal, then complete installation in [Installing CLI](/deploying-lineaje/hybrid-deployment/installing-and-registering-the-cli.md#installing-cli).

</details>

<details>

<summary>AWS Marketplace</summary>

You can deploy Lineaje SCA360 in your AWS environment by subscribing to the Lineaje service and creating a stack and then configuring the instance in the Lineaje Portal.

### Step 1: Deploying Lineaje SCA360 Through AWS Marketplace

1. Log in to the AWS Marketplace and search for `Lineaje SCA360` in the AWS Marketplace products.

   <figure><img src="/files/bss7xSy8O6AJqbfSXrdr" alt="Search for Lineaje in AWS Marketplace"><figcaption></figcaption></figure>
2. Click on **View purchase options** and click **Subscribe**.

   <figure><img src="/files/3spgRSn7k1ur3ykBUfQD" alt="Lineaje purchase options"><figcaption></figcaption></figure>
3. Click **Set up your account** and enter the details.

   <figure><img src="/files/cH7955E4q6Ad7d76QxZ0" alt="Enter account details"><figcaption></figcaption></figure>
4. Click **Next**.
5. Click **Deploy** to set up SCA360 in your preferred AWS region.
6. On the **Stacks** page, a pre-filled CloudFormation template is displayed. Enter the following information:

   * **VPC ID**: Choose your preferred VPC to define the network boundary of your AWS resources. VPC ID must be created prior to deployment. To learn more, see [Prerequisites](https://veedna.atlassian.net/wiki/spaces/~712020229c992a6cc548239d3993932adc913d/pages/1024163841/Tech+Writer+Copy+Lineaje+SCA360+Installation#Prerequisites).
   * **Subnet ID**: Choose a subnet where your resources will be launched within the VPC. Subnet ID must be created prior to deployment. To learn more, see [Prerequisites](https://veedna.atlassian.net/wiki/spaces/~712020229c992a6cc548239d3993932adc913d/pages/1024163841/Tech+Writer+Copy+Lineaje+SCA360+Installation#Prerequisites).
   * **CIDR IP Range**: Enter `0.0.0.0/0`. Accesses the VM or EC2 instance to allow access of all IP addresses. To allow a specific IP address access, set CIDR to `x.x.x.x/32`.
   * **Key Pair**: Select the Key Pair. Key Pair must be created prior to deployment. To learn more, see [Prerequisites](https://veedna.atlassian.net/wiki/spaces/~712020229c992a6cc548239d3993932adc913d/pages/1024163841/Tech+Writer+Copy+Lineaje+SCA360+Installation#Prerequisites).

   <figure><img src="/files/an4UvhnbOvA0FWN5Mcd3" alt="Aws stacks page"><figcaption></figcaption></figure>
7. Under **Capabilities**, check **I acknowledge that that AWS CloudFormation might create IAM resources**.
8. Click **Create stack.**

### Step 2: Configuring Lineaje SCA360 in the Lineaje Portal

1. Log in to the [Lineaje Portal](https://app.veedna.com/).
2. In the left-hand navigation, select **Integrations**.
3. Click **Scan Remotely** to create an SBOM by connecting to your relevant SCM or Container Registry. Click **Upload and Scan** > **Upload Manifest File** if you want to generate SBOM by uploading a Manifest File.

   <figure><img src="/files/YsoZ7nNPpn5kw8Sb5mM1" alt="Scan remotely"><figcaption></figcaption></figure>
4. To create an SBOM using your GitHub repository:

   1. In **Scan Remotely**, select **GitHub**.
   2. In the **Details** section, enter a name for your integration and enter a GitHub link.
   3. Click **Next**.

   <figure><img src="/files/kAhZ6BMpXm8dhfP4WRFX" alt="Add details"><figcaption></figcaption></figure>
5. In the **Repositories** section, select the tag or branch you want to scan from your GitHub repository and click **Save Configuration**.

   <figure><img src="/files/UfzGdB8pO5MwXWfZ5ywQ" alt="Select tag or branch"><figcaption></figcaption></figure>
6. Under **Project Name**, click on your project to view the enriched SBOM.
7. Click **Actions** to download the SBOM.

   <figure><img src="/files/8FCrnkkFQ0lwOU8PScPw" alt="Download the SBOM"><figcaption></figcaption></figure>

</details>

<details>

<summary>Open Virtual Appliance (OVA)</summary>

Set up your Windows 11 environment to deploy Lineaje SCA360. Install the required components, configure a virtual machine, and deploy SCA360 using Gitbash.

### **Step 1: Installing the Required Components**

Install the following on your Windows 11 system (use default settings):

* [Python 3](https://www.python.org/downloads/windows/)
* [Git Bash](https://git-scm.com/install/windows)
* [Oracle VirtualBox](https://www.virtualbox.org/wiki/Downloads)

### **Step 2: Setting Up a Virtual Machine**

1. Download the OVA file from the SharePoint link sent to your email address.
2. Open **Oracle VirtualBox** > **File** > **Import Virtual Application**.
3. Select the OVA file and click **Finish**.
4. After import, go to **Settings**.

   <div align="left"><figure><img src="/files/BCgXGdAXWwjPgW46iyLk" alt="Settings"><figcaption></figcaption></figure></div>
5. In the **System** section, set **Base Memory** to **4096 MB**.

   <figure><img src="/files/p57VAbFjfAYFboeCY6T0" alt="System section"><figcaption></figcaption></figure>
6. In the **Network** section, click on **Port Forwarding**.

   <figure><img src="/files/DVSq0DKgD2Rwux3aXNdG" alt="Port forwarding"><figcaption></figcaption></figure>
7. Create a new rule with the following configuration:
   * **Name**: SSH
   * **Protocol**: TCP
   * **Host IP**: 127.0.0.1
   * **Host Port**: 2222
   * **Guest Port**: 22

<figure><img src="/files/ZaZkbDjArHVWkSbc8YwK" alt="New rule configuration"><figcaption></figcaption></figure>

8. Click **OK**.
9. Click **OK** to save the settings. 8. Start the virtual machine. 9. Log in using the following credentials:
   * Username: `lineaje`
   * Password: `lineaje`

{% hint style="info" %}
The default host key is the right Ctrl key. The minimum disk space is 20 GB. For POC, a minimum 100 GB is recommended.
{% endhint %}

10. Confirm that the CLI is installed correctly by checking its version.

`./veecli --version`

{% hint style="info" %}
If SSH or download fails, type the command sudo dhclient. Verify that the virtual machine has internet connectivity by performing a simple network check, such as sending a ping request to a reliable website (e.g., Google).
{% endhint %}

</details>

#### Next steps

After deployment, complete these steps for all modes:

1. [Registering CLI](/deploying-lineaje/hybrid-deployment/installing-and-registering-the-cli.md#registering-cli)
2. [Using the CLI](/deploying-lineaje/hybrid-deployment/using-the-cli.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.veedna.com/deploying-lineaje/hybrid-deployment/deploying-sbom360.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.