---
title: "Export SPDX SBOM (Beta)"
method: GET
path: "/orgs/{org_slug}/export/spdx/{id}"
tags: ["full-scans"]
---

# Export SPDX SBOM (Beta)

`GET /orgs/{org_slug}/export/spdx/{id}`

Export a Socket SBOM as a SPDX SBOM

Supported ecosystems:

- crates
- go
- maven
- npm
- nuget
- pypi
- rubygems
- spdx
- cdx

Unsupported ecosystems are filtered from the export.

This endpoint consumes 1 unit of your quota.

This endpoint requires the following org token scopes:
- report:read

## Path parameters

- `org_slug` string, required
- `id` string, required

## Query parameters

- `author` string
- `project_group` string
- `project_name` string
- `project_version` string
- `project_id` string
- `include_vulnerabilities` string

## Response `200`

SPDX SBOM

- SPDXManifestSchema
  - `spdxVersion` string, required
  - `dataLicense` string, required
  - `SPDXID` string, required
  - `name` string, required
  - `documentNamespace` string, required
  - `creationInfo` object, required
    - `created` string, required
    - `creators` string[], required
  - `documentDescribes` string[], required
  - `packages` object[], required
    - `name` string, required
    - `SPDXID` string, required
    - `versionInfo` string, required
    - `packageFileName` string, required
    - `description` string
    - `primaryPackagePurpose` string
    - `downloadLocation` string
    - `filesAnalyzed` boolean, required
    - `homepage` string, required
    - `licenseDeclared` string, required
    - `externalRefs` object[], required
      - `referenceCategory` string, required
      - `referenceType` string, required
      - `referenceLocator` string, required
    - `checksums` object[]
      - `algorithm` string, required
      - `checksumValue` string, required
  - `relationships` object[], required
    - `spdxElementId` string, required
    - `relatedSpdxElement` string, required
    - `relationshipType` string, required

## Other responses

- `400` — Bad request
- `401` — Unauthorized
- `403` — Insufficient max_quota for API method
- `404` — Resource not found
- `429` — Insufficient quota for API route

---

[API](https://skmtc.dev/socket-dev/apis/socket.md) · [All operations](https://skmtc.dev/socket-dev/apis/socket/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/socket-dev/socket/revisions/bf994b75d33f/schema)