SBOM link is a free SBOM viewer and sharing tool. It provides a human readable summary of your SBOM that can be shared with a permanent link.
Software Bill of Materials (SBOM) is a nested inventory, a list of ingredients that make up software components (systems, applications or libraries).
SBOMs are useful for tracking what is in a software package. They can be used to analyze security vulnerabilities, licensing information, and other important information.
There are many tools, open source and commercial, that can generate an SBOM from a source repository or container image. Prominent open source alternatives are Trivy, Syft, maven-cyclonedx-plugin and many more.
Anyone with the link can see your SBOM. Make sure to keep the link private if you don't want others to see it.
SBOM link supports SPDX 2.x and CycloneDX 1.x standards, in JSON, XML and tag-value formats.
We are committed to keep shared SBOMs online permanently. The site is funded by https://sbom.observer which depends on this site for sharing SBOMs publicly.
Shared links are of the format /share/[uuid]/[sha-256]/[filename]. To verify that the contents have not been tampered with you can download and compare the sha-256 hash of the file with the hash in the URL.