SBOM (Dependency Inventory)

The SBOM tab provides a complete inventory of all third-party components discovered during the scan. To access it:

1. Open a completed scan from the Scans tab.
2. Click the SBOM tab (PackageSearch icon) in the scan detail page.
3. A table of discovered packages appears with columns: Package, Version, Ecosystem, Type, License, Language, Location, Dependencies, and Indexed date.
4. Filter by ecosystem (npm, PyPI, Maven, Go, NuGet, etc.), component type (library, framework, application), or license family.
5. Search by package name using the search box.
6. Click any column header to sort. Use pagination controls at the bottom (25, 50, or 100 rows per page).

If the tab shows "SBOM not requested," enable SBOM generation in the Policy tab and re-run the scan. Summary badges above the table show component counts by ecosystem and type.