---
updatedAt: 2026-08-17T08:11:10.000Z
agentTools:
  siteIndex: https://docs.jfrog.com/llms.txt
  projectIndex: https://docs.jfrog.com/security/llms.txt
---

# Enrich your SBOM JSONs & XMLs

The `sbom-enrich` command takes an exported CycloneDX SBOM file in XML or JSON format and enriches it with package vulnerabilities identified by Xray.

## Before You Begin

It is essential you have:

* Xray 3.101.3 or above
* JFrog CLI 2.60.0 or above

**Command**: `jf sbom-enrich`, `jf se`

## Command Parameters

| Parameter        | Description                                                                                                             | Optional/Required |
| ---------------- | ----------------------------------------------------------------------------------------------------------------------- | ----------------- |
| `--insecure-tls` | Set to true to skip TLS certificates verification.                                                                      | Default: `false`  |
| `--server-id`    | \[Optional] Server ID configured using the `jf c add` command. If not specified, the default configured server is used. | Optional          |
| `--url`          | Specifies the URL of the JFrog platform.                                                                                | Optional          |
| `--user`         | Specifies the user name of your JFrog platform.                                                                         | Optional          |
| `--password`     | Specifies the user password of your JFrog platform.                                                                     | Optional          |
| `--access-token` | Specifies the access token of your JFrog platform.                                                                      | Optional          |
| `--xray-url`     | Specifies the URL of your Xray server.                                                                                  | Optional          |
| `--threads`      | Number of parallel threads used to scan the source code project. Default: `3`.                                          | Optional          |
| `file_path`      | The path to the SBOM file you want to enrich.                                                                           | Required          |

### Examples

Enrich a CycloneDX XML file

```
jf se "path/to/file.xml"
```

Enrich a CycloneDX JSON file

```
jf se "path/to/files/file.json"
```