CBOM request for Harbor components

[swasthibp]

Hi Team,

Where can i find the Cybersecurity bill of Materials (CBOM) information for the components in Harbor?
At a high level, CBOM is:

1. An inventory of all software/firmware components in a product or system:
2. Packages, libraries, containers, services, third‑party components, etc.
3. With versions, origins, and sometimes licenses.
4. Security‑focused metadata, such as:
   Known vulnerabilities (CVEs) for each component.
   Patch/upgrade status.
5. Cryptographic libraries and algorithms in use.

Thanks,
Swasthi

[swasthibp]

Hi Team,

Can we please have some help here?

[swasthibp]

Hi Team,

Can we please get some support here?

[Vad1mo]

Harbor does not have a CBOM, you have to create one for Harbor yourself.

[swasthibp]

Hi @Vad1mo ,

Can you please guide on us how we can generate this data for harbor?

[Vad1mo]

I don't know much about CBOM, to give advises.

[Vad1mo]

Is that a regulatory requirement for you? If one which has a it?

[swasthibp]

Yes, its for audit purposes that we require this data. Who can help here please?