---
title: "Upload container SBOM"
method: POST
path: "/containers/sbom"
---

# Upload container SBOM

`POST /containers/sbom`

## Request

- Base URL: `https://app.aikido.dev/api/public/v1`
- URL: `https://app.aikido.dev/api/public/v1/containers/sbom`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://app.aikido.io/api/oauth/token` scopes: `containers:write`

Upload a self-generated SBOM

## Request body

- object
  - `container_image_name` string, required: The name of the image.
  - `sbom` object, required: The SBOM.
  - `tag` string: The tag of the image.
  - `digest` string: The digest of the image.
  - `allow_multiple_tags` boolean: Allow multiple tags for the image to be created. Will create a new container image for each tag. This feature needs to be enabled by Aikido support before it can be used.

## Response `200`

The SBOM has been uploaded and is being scanned.

- object
  - `success` integer, required: The integer 1 indicating success
  - `container_repo_id` integer, required: The container repository id in Aikido. Use with GET /containers/{container_repo_id} to poll scan completion (last_scanned_at).
  - `scan_id` integer, required: The scan audit log id for this upload.

## Other responses

- `400`: One or more of the provided fields are invalid.

---

[API](https://skmtc.dev/aikido/apis/aikido-security-api-documentation.md) - [All operations](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/llms.txt) - [OpenAPI document](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/revisions/da8691338133?raw)