TechnoSoluce™ SBOM Analyzer - User Guide

Getting Started

Upload Your SBOM

The first step in analyzing your Software Bill of Materials is to upload your SBOM file to the platform.

Supported SBOM Formats

CycloneDX JSON Example:

{
  "bomFormat": "CycloneDX",
  "specVersion": "1.4",
  "version": 1,
  "metadata": {
    "timestamp": "2024-01-15T10:30:00Z",
    "tools": [
      {
        "vendor": "CycloneDX",
        "name": "cyclonedx-maven-plugin",
        "version": "2.7.8"
      }
    ],
    "component": {
      "type": "application",
      "name": "my-application",
      "version": "1.0.0"
    }
  },
  "components": [
    {
      "type": "library",
      "name": "lodash",
      "version": "4.17.21",
      "purl": "pkg:npm/lodash@4.17.21",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ]
    }
  ]
}

SPDX JSON Example:

{
  "spdxVersion": "SPDX-2.3",
  "dataLicense": "CC0-1.0",
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "my-application-1.0.0",
  "documentNamespace": "https://example.com/spdx/my-application-1.0.0",
  "creationInfo": {
    "created": "2024-01-15T10:30:00Z",
    "creators": ["Tool: cyclonedx-maven-plugin-2.7.8"]
  },
  "packages": [
    {
      "SPDXID": "SPDXRef-Package-lodash",
      "name": "lodash",
      "versionInfo": "4.17.21",
      "downloadLocation": "NOASSERTION",
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT"
    }
  ]
}

Upload Process

1. Prepare Your SBOM File
   • Ensure your SBOM is in CycloneDX JSON or SPDX JSON format
   • Files up to 100MB are supported
   • Most SBOM generation tools support these formats
2. Upload to Dashboard
   • Drag and drop your file onto the upload area or click to browse
   • The platform will validate the file format automatically
3. Enable Real-Time Analysis
   • Toggle "Use Real Analysis" to enable live vulnerability scanning
   • This queries OSV.dev database for current threat intelligence

Understanding Results

After analysis completes, you'll see comprehensive results across multiple views. Here's how to interpret each section:

Navigation & Features

The application provides 10 different views to explore your SBOM analysis:

Generating Reports

Create professional reports tailored for different stakeholders:

Export Formats

• PDF - Professional reports for stakeholders
• CSV - Data analysis and integration
• JSON - Programmatic use and API integration
• HTML - Web-based viewing and sharing

Batch Analysis

Analyze multiple SBOM files simultaneously for comprehensive portfolio assessment:

1. Access Batch Analysis

   Navigate to the "Batch Analysis" section from the main navigation menu

2. Upload Multiple Files

   Select multiple SBOM files (up to 10 files) using the batch upload interface

3. Configure Analysis Settings

   Set analysis parameters, compliance frameworks, and risk thresholds for all files

4. Monitor Progress

   Track analysis progress across all files with real-time status updates

5. Compare Results

   Generate comparative reports and identify patterns across your software portfolio

Best Practices

Follow these recommendations to get the most value from your SBOM analysis:

Troubleshooting

Support & Resources

This user guide is part of the TechnoSoluce™ SBOM Analyzer platform by ERMITS LLC. For the most up-to-date information, please refer to the in-app documentation.