Enrich your SBOM JSONs & XMLs

The sbom-enrich command takes an exported CycloneDX SBOM file in XML or JSON format and enriches it with package vulnerabilities identified by Xray.

Before You Begin

It is essential you have:

Xray 3.101.3 or above
JFrog CLI 2.60.0 or above

Command: jf sbom-enrich, jf se

Command Parameters

Parameter	Description	Optional/Required
`--insecure-tls`	Set to true to skip TLS certificates verification.	Default: `false`
`--server-id`	[Optional] Server ID configured using the `jf c add` command. If not specified, the default configured server is used.	Optional
`--url`	Specifies the URL of the JFrog platform.	Optional
`--user`	Specifies the user name of your JFrog platform.	Optional
`--password`	Specifies the user password of your JFrog platform.	Optional
`--access-token`	Specifies the access token of your JFrog platform.	Optional
`--xray-url`	Specifies the URL of your Xray server.	Optional
`--threads`	Number of parallel threads used to scan the source code project. Default: `3`.	Optional
`file_path`	The path to the SBOM file you want to enrich.	Required

Examples

Enrich a CycloneDX XML file

jf se "path/to/file.xml"

Enrich a CycloneDX JSON file

jf se "path/to/files/file.json"