CBOM↑
AQtive Guard supports uploading Cryptographic Bill of Materials (CBOM) files in JSON format for analysis and inventory. CBOM provides a comprehensive inventory of an application’s cryptographic objects and dependencies to expand your cryptographic and IT asset inventory in AQtive Guard.
Prerequisites↑
- A valid CBOM JSON file (supported versions: 1.4 and 1.6)
Upload a CBOM file↑
To upload a CBOM file, follow these steps:
- Navigate to Data Sources from the main menu, then select Upload in the CBOM panel.
-
Enter the following metadata to provide attributes for the CBOM data in AQtive Guard:
- Application Name - Enter the name of the application or codebase that this CBOM data belongs to, typically referencing the root name of the codebase.
- Language - The programming language used for the application, as provided by the CBOM, or the tool used to scan the application.
Note
Make sure the metadata is entered correctly before you upload the JSON file. It’s used to identify the CBOM data in the associated AQtive Guard tables.
-
To upload the CBOM JSON file, either:
- Click in the target area and select the file from your local system.
- Drag and drop the file into the target upload area.
The data will begin uploading automatically.