---
title: "Upload Bom"
method: POST
path: "/api/v1/boms"
---

# Upload Bom

`POST /api/v1/boms`

## Request

- Base URL: `https://api.stacktrace.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.stacktrace.ai/api/v1/boms`
- Auth: none declared

## Headers

- `authorization` string, nullable

## Request body

- BomUploadRequest
  - `asset_id` string, required
  - `source` 'endpoint' | 'repo' | 'ci' | 'manual', required
  - `openaca_version` string, required
  - `target_locator` string, nullable
  - `content_hash` string, required
  - `bom` object, required
  - `posture_findings` PostureFindingPayload[]
    - `source` string
    - `source_version` string
    - `finding_id` string, required
    - `finding_version` string, required
    - `severity` string, required
    - `confidence` string, nullable
    - `scope` 'component' | 'bom' | 'asset', required
    - `component_bom_ref` string, nullable
    - `summary` string, nullable
    - `fix` string, nullable
    - `evidence` object
    - `taxonomies` object
    - `source_specific` object
  - `observations` ObservationPayload[]
    - `source` string, required
    - `source_version` string, required
    - `finding_id` string, required
    - `finding_version` string
    - `severity` string, required
    - `confidence` string, required
    - `component_bom_ref` string, required
    - `subject_coordinate` string, required
    - `summary` string, nullable
    - `fix` string, nullable
    - `evidence` object
    - `taxonomies` object
    - `categories` string[]
    - `source_specific` object
    - `declared_by` object

## Response `200`

Successful Response

- BomUploadResponse
  - `bom_id` string, required
  - `asset_id` string, required
  - `agent_kind` string, required
  - `agent_id` string, nullable, required
  - `component_count` integer, required
  - `finding_count` integer, required
  - `drift` DriftSummary, required
    - `added` integer, required
    - `removed` integer, required
    - `changed` integer, required
  - `dashboard_url` string, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/stacktrace/apis/stacktrace-fleet-api.md) - [All operations](https://skmtc.dev/stacktrace/apis/stacktrace-fleet-api/llms.txt) - [OpenAPI document](https://skmtc.dev/stacktrace/apis/stacktrace-fleet-api/revisions/0ee5484d1d0b?raw)