Name		Name	Last commit message	Last commit date
parent directory ..
__tests__		__tests__
json-schema		json-schema
README.md		README.md
api.ts		api.ts
cli.ts		cli.ts
constants.ts		constants.ts
language.ts		language.ts
license.ts		license.ts
payload.ts		payload.ts
types.ts		types.ts
upload.ts		upload.ts
validation.ts		validation.ts

README.md

SBOM command

Warning: The SBOM upload command is in beta. It requires you to set DD_BETA_COMMANDS_ENABLED=1, and should not be used in production.

This command lets you upload SBOM files to the Datadog intake endpoint.

Supported Formats

CycloneDX 1.4

Usage

DD_BETA_COMMANDS_ENABLED=1 datadog-ci sbom upload --service <my-service> <path/to/sbom.json>

Environment variables

The following environment variables must be defined:

DD_SITE: the Datadog site
DD_APP_KEY: the App Key to use
DD_API_KEY: the API key to use
DD_SERVICE: the Datadog service you use (if --service not specified)

Development

When developing software, you can try with the following command:

DD_BETA_COMMANDS_ENABLED=1 yarn launch sbom upload --service <your-service> --env <your-environment> /path/to/sbom.json

Further reading

Additional helpful documentation, links, and articles:

Learn about Static Analysis