---
title: "Download Sbom"
method: GET
path: "/snapshots/{snapshot_id}/security/sbom"
tags: ["security"]
---

# Download Sbom

`GET /snapshots/{snapshot_id}/security/sbom`

Download the snapshot's CycloneDX SBOM (`{repo}-{shortsha}.cdx.json`).

Raw passthrough of the artifact syft produced at scan time — we never
rebuild or mutate it, so the document stays signature-stable.

## Path parameters

- `snapshot_id` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/repowise/apis/repowise-hosted-api.md) · [All operations](https://skmtc.dev/repowise/apis/repowise-hosted-api/llms.txt) · [OpenAPI document](https://skmtc.dev/repowise/apis/repowise-hosted-api/revisions/98c833b3480d?raw)