Configuring Code Insight for Exports to SBOM Insights

SBOM Insights (a Revenera SCA product) gives organizations the ability to manage security and legal risk by maintaining a complete, accurate SBOM (Software Bill of Materials) in the cloud. SBOM Insights aggregates this SBOM over multiple sources and provides full visibility of its contents to security and legal teams, as well as to supply chain partners.

If Code Insight has been configured to perform SBOM Insights exports, Project Analysts can export inventory data from a given Code Insight project to SBOM Insights. When the export process is finished, SBOM Insights automatically imports the exported data to a bucket, where the data is managed and aggregated with SBOMs from other sources. (For complete information about SBOM Insights, click here to access the SBOM Insights user documentation.)

To enable the export of inventory data from Code Insight to SBOM Insights, the Code Insight System Administrator must perform two tasks:

• Configure the Code Insight connection to SBOM Insights.

• Define a custom project field that lets Project Administrators identify an SBOM Insights bucket for their project’s exports to SBOM Insights.

Refer to the following sections for information about this configuration:

• Overview of the Export Configuration and Process

• Configuring Code Insight to Enable Exports to SBOM Insights