Skip to content
/Applications

Import a container SBOM and create a new project (Cloud Native)

Request

Creates a new project under the application (or returns the existing one) and imports the uploaded container SBOM (CycloneDX JSON or SPDX JSON/tag-value). The scan is queued for asynchronous processing by the cloud-native engine.

Security
bearer-key
Path
applicationUuidstringrequired

Application UUID (Administration > Applications)

Query
imageNamestring

Optional image name recorded on the scan (e.g. alpine:3.19).

Bodymultipart/form-data
projectNamestringrequired

Name of the project to create under this application

projectDescriptionstring

Optional project description

sbomFilestring, (binary)required

The container SBOM file to upload (CycloneDX JSON or SPDX). Only one file per request.

POST
/api/v3.0/applications/{applicationUuid}/container/projects/importSbom
{
  "projectName": "string",
  "projectDescription": "string",
  "sbomFile": "string"
}

Responses

Container SBOM import successfully queued and project created

Bodyapplication/json
supportTokenstring

Support token for tracking

Example:"1171c60d"
projectobject(ProjectDTOV3)

Project information

scanobject(SbomScanInfoDTO)

Scan information

Response
{
  "supportToken": "1171c60d",
  "project": {
    "uuid": "123e4567-e89b-12d3-a456-426655440000",
    "name": "My Project",
    "path": "My Application",
    "applicationName": "My Application",
    "applicationUuid": "123e4567-e89b-12d3-a456-426655440000"
  },
  "scan": {
    "scanUuid": "45e0c7f0-2a64-4a1c-bb2b-22e1c4f02126",
    "createdAt": "2025-10-27T18:50:05Z"
  },
  "link": {
    "logs": "/api/v3.0/projects/{projectUuid}/scans/{scanUuid}/dependencies/SBOM/logs"
  }
}