{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":44193,"path":"security-management/sbom-core/vr-sbom-ingest.md","title":"Upload Software Bill of Materials files manually","bundle":null,"doc_type":null,"release":"australia","body":"\n# Upload Software Bill of Materials files manually\n\nUpload Software Bill of Materials \\(SBOM\\) files manually.\n\n## Before you begin\n\nStarting with version 4.0, SBOM Core supports:\n\n-   XML and JSON in versions 1.0 - 1.6 of CycloneDX.\n-   JSON in versions 2.2 - 2.3 of SPDX.\n\nRole required: sn\\_sbom\\_core.sbom\\_ingest\n\n## Procedure\n\n1.  Upload files manually.\n\n    The method you use to upload your files depends on whether you have the SBOM Core or SBOM Response applications installed.\n\n<table id=\"choicetable_xcf_543_czb\"><thead><tr><th align=\"left\" id=\"d145314e86\">\n\nOption\n\n</th><th align=\"left\" id=\"d145314e89\">\n\nDescription\n\n</th></tr></thead><tbody><tr><td id=\"d145314e95\">\n\n**If you have installed SBOM Core**\n\n</td><td>\n\n1.  Navigate to **SBOM Core** &gt; **BOM Ingestion Status**.\n2.  On the Bill of Materials list select **New**.\n3.  Select the **Click to add** link.\n\nYou can upload one SBOM file at a time.\n\n4.  Select **Choose file** and locate the file you want.\n\nThe file name is displayed on the Choose an attachment file page.\n\n5.  Select **OK**.\n\n\n</td></tr><tr><td id=\"d145314e153\">\n\n**If you have installed SBOM Response starting with v4.0**\n\n</td><td>\n\n1.  Navigate to **All** &gt; **Workspaces** &gt; **SBOM Workspace** &gt; **BOM Queue**.\n2.  Select **Upload BOM**.\n\nThe Upload SBOM file modal is displayed.\n\n3.  Select the **Attach file** link.\n4.  Locate the file you want and select **Open**.\n\nAfter your file uploads, a link for the file is displayed along with three icons that provide you with the following options:\n\n    -   Download the file.\n    -   Edit the file name.\n    -   Delete the file from the upload.\n5.  Select **Upload** to continue.\n\nYou can upload one SBOM file at a time.\n\n6.  \\(Optional\\) Select a Business application and a Product model from the lists.\n\nThese values help you associate this SBOM to a business application or product model in your organization. This information is displayed on the BOM entity record after upload.\n\n7.  Select **Upload**.\n\nThe BOM queue page is displayed and the file is listed on the SBOM ingestion section along with upload status other information about the file.\n\n</td></tr></tbody>\n</table>2.  Upload SBOM files imported by the [Veracode Vulnerability Integration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/application-vulnerability-response/veracode-vuln-integration.md).\n\n    **Note:** You can upload Veracode files in CycloneDX \\(JSON and XML\\) and SPDX \\(XML\\) formats only if you have installed and activated the Veracode integration with Application Vulnerability Response. See the [Veracode Vulnerability Integration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/application-vulnerability-response/veracode-vuln-integration.md) for more information.\n\n\n## Result\n\nAfter an SBOM is successfully processed, where you view the upload status depends on the applications you are using.\n\n-   If you are using SBOM Response, the BOM Entity record is displayed on the SBOM Ingestion Status list in the BOM Queue module in the SBOM Workspace.\n-   If you are using SBOM Core, navigate to **SBOM Core** &gt; **BOM Ingestion Status**.\n\n**Related topics**  \n\n\n[Uploading Software Bill of Materials files using a REST API](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/sbom-core/vr-sbom-preparing-upload.md)\n\n"}}