> For the complete documentation index, see [llms.txt](https://docs.debricked.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.debricked.com/product/sbom-management/import-an-sbom.md).

# Import an SBOM

Fortify SCA parses the file and extracts component and metadata information. When an SBOM contains supported identifiers, such as Package URLs, Fortify SCA enriches matched components. Enrichment can add vulnerability and license information.

The imported SBOM is available for review in the **SBOMs** space.

{% hint style="info" %}
*This feature is only available for our* [*SCA Enterprise*](https://debricked.com/pricing/) *users. Already have an account?* [*Click here to upgrade.*](https://debricked.com/app/en/repositories?billingModal=enterprise,free)
{% endhint %}

### Supported formats

Fortify SCA supports the following SBOM formats:

* SPDX JSON (`.spdx.json`)
* CycloneDX (`.bom..json` `.*cdx.json` `.*cdx.xml` `.bom..xml`)

SPDX emphasizes license and compliance information. CycloneDX emphasizes vulnerability information.

### Import an SBOM

1. Click **Import**.<br>

   <figure><img src="/files/BcqQ7Y1SIm3jH9T75GGR" alt=""><figcaption><p>Import SBOM</p></figcaption></figure>
2. In the **Import SBOM** dialog, drag one or more SBOM files into the upload area. Alternatively, click **Select files** and choose the files.
3. Click **Import**.
4. Wait for each file to show an **Imported** status.
   * Select **View Results** to open the imported SBOM.
   * Select **Cancel** to close the dialog. The imported SBOM appears in the **All** tab.

### Resolve import issues

An import can fail for these reasons:

* Invalid SBOM format
* Missing required fields
* Corrupted file
* Your organization has reached its limit of 15 uploaded SBOMs.

Review the displayed error. Then verify that the file is valid and complete. To import another SBOM after reaching the limit, delete an existing uploaded SBOM.

{% hint style="info" %}
Results depend on the quality and completeness of the uploaded SBOM. Fortify SCA does not analyze supplied source code.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.debricked.com/product/sbom-management/import-an-sbom.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.