The Software Bill Of Materials, or SBOM, is a formal list of components that were used in the development and supply chain of a product, according to the National Telecommunications and Information Administration (NTIA). We are committed to providing an automatically created SBOM for i-net CoWork, creating transparency into components used in your specific setup. That includes the core installation as well as additional plugins provided by i-net software GmbH.

The access to the generated SBOM is available by the URL https://<server>/.well-known/sbom with some requirements to be fulfilled:

• The SBOM address must be accessed by a user with administrative permissions
• The SBOM is only delivered in a CycloneDX JSON format, requiring the accessor to set the Accept header of the request to application/json

It is advised, that the administrative user makes use of the Token Authentication plugin, restricting the API Token to the .well-known/sbom URL only.

# REQUEST
GET /.well-known/sbom HTTP/1.1
Authorization: Bearer VGhpcyBpcyBqdXN0IGEgZGVtbyBhY2Nlc3MgdG9rZW4u
Accept: application/json

curl --request GET \
  --url https://my-company.com/.well-known/sbom \
  --header 'Accept: application/json' \
  --header 'Authorization: Bearer VGhpcyBpcyBqdXN0IGEgZGVtbyBhY2Nlc3MgdG9rZW4u'