Importing SBOM

An SBOM can be imported automatically from a CI/CD pipeline or manually using the Dashboard.

Interlynk supports:

• CycloneDX

  • Versions: 1.2-1.5

  • Formats: JSON, XML

• SPDX

  • Versions: 2.2-2.3

  • Formats: JSON

Automated Import

Automated SBOM Import

1. Install the PyLynk utility from here: https://github.com/interlynk-io/pylynk

2. Add the following command in the CI/CD once the SBOM file is generated

python3 pylynk.py upload --prod {productName} --env {envName} --sbom {sbomFile}

Manual Import

Manual SBOM Import

1. Click on the 'Products' side-navigation button

2. Click on the Product Name

3. Click on the 'Upload SBOM' icon

4. Select 'Environment' for import and drag or click to select the SBOM file

5. Click 'Upload' to complete

SBOM Post-Processing

Interlynk performs the following additional processing on imported SBOM:

1. SBOM Checks
2. Automation Rules
3. Internal Components
4. Vulnerability Scan