0
6.5.1
Australia, Zurich, Yokohama Patch 6, Yokohama
Standalone Application
SBOM Core helps organizations maintain the searchable inventory of all the open-source components used in their environment.
- Upload SBOM files with an API or manually. This application supports XML and JSON formats for CycloneDX. JSON format is supported for SPDX.
- Search the inventory of files to identify your potential risk of exposure with a specific component.
New:
- You can configure an automated cleanup of older SBOM documents and metadata from a dedicated configuration page where you create and manage your own cleanup rules. This cleanup helps you reduce your data volume in the SBOM data tables and might help you improve query and ingestion performance.
- An archival capability that automatically unlinks and deactivates components from a prior SBOM version once a newer SBOM is ingested for the same application. Archiving helps you maintain the SBOM workspace so that you can focus on current, actionable data.
Changed:
SBOM ingestion performance enhancements through parallel processing of uploaded SBOM files that significantly reduces processing time for customers with high-volume SBOM ingestion of hundreds of thousands of files per week.
Fixed:
- An issue where CycloneDX SBOM ingestion failed when a file's vulnerability rating data was split across multiple partial rating objects instead of one complete object. Fixed by adding null-safe checks so ingestion now processes the available rating data instead of failing the whole file.
- In some cases, SBOM ingestion could generate large numbers of blank, empty component records if a component relationship pointed at a missing or deleted reference. Each blank record then triggered another recount, compounding the problem. Fixed by validating references before use and preventing empty relationships from being created in the first place.
- An issue where SBOM uploads could get stuck indefinitely in a "Processing" state due to a coding error in the routine that reconciles external references and hashes during ingestion. Fixed by correcting the reference so ingestion completes and queued uploads process normally.
- An access-related security issue in an internal SBOM Workspace data component. Fixed by enforcing proper access checks throughout. No customer action is required.
- An issue where SBOM Workspace UI action buttons did not appear for platform languages other than English. Fixed by correcting the identifier format so action buttons render correctly regardless of language setting.
Not applicable for this application version.
- Required roles: sn_sbom_core.sbom_ingest, sn_sbom_core.admin.
- Dependencies: At a minumum, the Data Model for SBOM application must also be installed to upload SBOMs.