View the Application version SBOM

The SBOM tab provides a complete view of the Software Bill of Materials (SBOM) for a specific application version. The SBOM lists all packages and components that make up the version, regardless of whether security scans or evaluations have been run. This ensures every version has a transparent, verifiable record of its ingredients for auditing, compliance, and promotion decisions.

Software Components Table

Displays all components in the version with the following details:

• Origin: Indicates whether the component is direct or transitive
• Component Name: The package, library, or module name
• Type: The package ecosystem (e.g., npm, Maven, PyPI)
• Version: The specific version included
• License: The license type (e.g., GPL-2.0, MIT)
• Application: Associated application or service, if available

To view the SBOM for an application version:

1. Navigate to Applications in AppTrust.
2. Select the relevant Application and Version.
3. Open the SBOM tab.