Projects

All the SBOMs that you generate show up in the Projects page. Depending on the type of input used to generate the SBOM, SBOM generation may take some time to complete (typically, one minute for small SBOMs and up to 30 min for larger ones).

The status of the SBOM in the Projects page is an indication of the progress in SBOM generation. It starts from Created, then Running and other states and finally show up as Ready for Review.

You can click on the SBOM when it’s in Ready for Review state and explore the SBOM. The data collected for the SBOM is organized into several tabs:

• Info

• Attestation

• Dependencies

• Provenance

• Vulnerabilities

• Mitigations

• Security posture

• Code quality

• Suppliers and Licenses

• Findings

You can perform the following actions for a project:

• Download

Download a report of your SBOM. The SBOM is currently downloaded as report.json, which is Lineaje's custom format. The report.json has all the attributes that SBOM360 collects using the deep fingerprint engines. This report, by far, has the most comprehensive data associated with the SBOM.

• Export PDF

Export the assessment report of your SBOM in PDF format. The assessment report is the summary of the important metadata associated with the SBOM. The report also contains Lineaje AI recommendations.

• Delete

Delete the SBOM. This action will delete the project and all its components. It will make sure to delete only those components that are unique to the project getting deleted. Any shared components are left in tact.

• Publish

Publish your SBOM to SBOM360Hub so that it can be shared to your consumers or distributors or resellers.

• Publishing an SBOM Hub creates an immutable copy of the SBOM in SBOM360 Hub

• Publishing an SBOM creates a “Self-Attestation Letter” (SAL) with a list of approvers

• Publishing an SBOM also goes through a mandatory EO14028 check in SBOM360 Hub