Skip to content

Import a container SBOM into a project (Cloud Native)

Request

Upload a pre-generated container SBOM (CycloneDX JSON or SPDX JSON/tag-value) to import into an existing project. The scan is queued for asynchronous processing by the cloud-native engine.

Security
bearer-key
Path
projectUuidstringrequired

UUID of the project

Query
imageNamestring

Optional image name recorded on the scan (e.g. alpine:3.19).

Bodymultipart/form-data
sbomFilestring, (binary)required

The container SBOM file to upload (CycloneDX JSON or SPDX). Only one file per request.

POST
/api/v3.0/projects/{projectUuid}/container/importSbom
{
  "sbomFile": "string"
}

Responses

Container SBOM import successfully queued

Bodyapplication/json
supportTokenstring

Support token for tracking

Example:"1171c60d"
projectobject(ProjectDTOV3)

Project information

scanobject(SbomScanInfoDTO)

Scan information

Response
{ "supportToken": "1171c60d", "project": { "uuid": "123e4567-e89b-12d3-a456-426655440000", "name": "My Project", "path": "My Application", "applicationName": "My Application", "applicationUuid": "123e4567-e89b-12d3-a456-426655440000" }, "scan": { "scanUuid": "45e0c7f0-2a64-4a1c-bb2b-22e1c4f02126", "createdAt": "2025-10-27T18:50:05Z" }, "link": { "logs": "/api/v3.0/projects/{projectUuid}/scans/{scanUuid}/dependencies/SBOM/logs" } }